phpFileManager is a complete filesystem management tool on a single file.
A server administration tool using PHP, meant for rapid file access, and also to verify the server configuration and security. The script can be renamed and deployed on an unique known url, and offers password protection.
All dependencies, like images, js and css files, are included inside the same file, so that the script can run even on offline devices, like a local Raspberry Pi, or ESP32 microcontroller. The size of the script is bellow 1Mb, and i want to make it even smaller. To conclude, this script is also a repository of several hand made functions, organized in sections, meant for learning PHP and explore all PHP capabilities. You can learn, copy and use them on your own projects.

Update (Sep 08, 2026)
- New release! Version 1.8.1, available on Github and Sourceforge.
- Fixed two main "vulnerabilities" reported (aka noob protection):
CVE-2026-72592 (Aug 10, 2026) Unrestricted File Upload:
By default the script has no upload file extension filter, allowing to send any filetype.
- phpFileManager now blocks upload of any files with extensions that could be used as webshell, the user can edit the blocked extensions on the config window.
CVE-2026-72593 (Aug 10, 2026) Authentication Bypass:
By default the script has no password set, allowing access without authentication.
- phpFileManager now requires the user to create a password on first access, and do not allow any unauthenticated remote access.

Check out my new project! The Shake Robber Android App.
Protect your smartphone with a silent security tool designed to catch intruders and secure your device. Shake Robber triggers front-camera photo captures and precise GPS logging during failed unlock attempts or shake gestures, backing up straight to your private Google Drive with zero developer access.