This update introduces one of the most requested features from the community.

MinePanel now includes a built-in File Manager, allowing server owners to manage server files directly from the web panel without accessing FTP or SSH.

This feature focuses on safe file management while keeping server security as the highest priority.


✨ New Feature — File Manager System

MinePanel now supports direct file management inside the web panel.

Available functions:

- Browse files and folders
- Read text-based files
- Edit and save configuration files
- Upload files
- Download files
- Create folders
- Rename files and folders
- Delete files and folders

This allows server owners to manage important server files directly from the browser.


File Browser

Added a new File Manager page.

Supported:

- Folder navigation
- Parent directory navigation
- File size display
- File type detection
- Folder/file separation

Users can now browse server files without leaving MinePanel.


Built-in Text Editor

Added a lightweight built-in text editor.

Features:

- Monospace editor layout
- Line number support
- UTF-8 safe file handling
- Direct file save

Supported editable file types:

- .txt
- .yml
- .yaml
- .json
- .properties
- .log
- .conf
- .toml
- .xml

This makes editing configuration files much easier.


⬆ File Upload System

Added file upload support.

Implementation:

- multipart/form-data upload handling
- NanoHTTPD native body parsing
- Maximum upload size limit (5MB)

Supported upload types:

- png
- jpg
- txt
- json
- yml
- yaml
- properties
- log

Unsafe file types are blocked automatically.


⬇ Direct File Download

Added direct file download support.

Implementation:

- Native NanoHTTPD file streaming
- Content-Disposition attachment support
- Binary-safe downloads

No Base64 encoding is used.

This reduces memory usage and improves performance.


Folder Management

Added folder management features.

Supported:

- Create folder
- Rename file/folder
- Delete file/folder

Delete operations now require confirmation before execution.


New File Permissions System

Added new permissions for role-based access.

New permissions:

- files.view
- files.read
- files.edit
- files.upload
- files.download
- files.delete
- files.rename
- files.mkdir

Permission mapping:

Owner

Full file access

- files.*

Admin

Limited file access

- files.view
- files.read
- files.edit
- files.download

Moderator

No file access

Viewer

No file access


Security Improvements

File Manager was designed with security as a priority.

Added protections:

Path Traversal Protection

Blocked dangerous path access attempts such as:

All paths now use canonical path validation.


Dangerous File Blocking

Blocked dangerous file types:

These files cannot be uploaded or edited.


Server Core Protection

Blocked access to server core files.

Protected examples:

This prevents accidental server corruption.


Large File Protection

Files larger than the safe editor limit cannot be opened in the editor.

This prevents memory spikes caused by extremely large files.


3-Layer Permission Protection

File Manager uses the same security architecture as RBAC.

Layer 1 — Sidebar Protection

Users without file permissions cannot see File Manager navigation.


Layer 2 — Frontend Protection

Restricted users cannot open File Manager pages.

Displayed message:


Layer 3 — Backend API Protection

All file APIs validate permissions server-side.

Direct unauthorized API requests using:

- curl
- Postman
- Browser requests

Return:


⚙ Internal Changes

Added systems:

- FileManagerService.java
- Native multipart upload handler
- Native binary file streaming
- Text file editor system
- Path validation system
- Dangerous file filtering
- File permission middleware
- Frontend file browser UI


Notes

This version focuses on **Safe File Management**.

Advanced features are intentionally not included in this release.

Not included in this version:

- ZIP / Unzip
- Plugin JAR upload
- Backup system
- Cloud backup
- Syntax highlighting editor
- Plugin Manager
- File version history

These may be considered in future versions.


Compatibility

Minecraft Versions

- 1.13.2+
- Tested up to 26.2

Java Versions

- Java 8+
- Tested on Java 8 / Java 21 / Java 25

Supported Server Software

- Spigot
- Paper
- Purpur (Experimental)

---

Thank you to everyone providing feedback and helping improve MinePanel.

MinePanel continues evolving based on real community feedback.

More updates coming soon