Recent Posts

1

HTML & templates / Re: Convert template from 2.3 to something new

« Last post by danny on October 28, 2026, 05:51:11 PM »

This update has been running a year and a half:  https://startfetch.com/hfs/HFS2x_2026.zip
It works for a security update, but I wouldn't use it for a new install because modern browsers fault on http sites.
I wouldn't use it with browsable root folder--personally, I use it with a DNS forwarder accessing a subfolder. 

The 2.3 default template isn't phone compatible and doesn't run well on 2.4.  And 2.4 doesn't have a fully effective security update available at all.   The update from 2.3 > 2.4 added more without streamlining the server process, resulting in reduced reliability.   It needed a rewrite.  The complete rewrite is HFS 3x.  It is a new program that may seem foreign to previous operators of HFS 2x.

HFS3x appearance can be modified:  https://rejetto.com/forum/index.php?topic=13718.0
Techniques documented in the 'Clarity Theme' thread are much easier than overhauling an old template. 
The majority of counterproductive visual differences can be changed and are addressed in that thread. 

2

HTML & templates / Re: Convert template from 2.3 to something new

« Last post by rejetto on October 13, 2026, 09:15:40 AM »

i don't remember clearly, but i suspect that you can just copy and paste the template of 2.3 into 2.4
No way you can use that on version 3.

are you aware that hfs 2.3-4 can be easily attacked? it should be considered ok only for very closed environments, where there is no possible threat. Surely not on the internet.

3

HTML & templates / Convert template from 2.3 to something new

« Last post by radiodj105 on October 13, 2026, 08:54:05 AM »

Hi there.
I still use version 2.3m (I know - too old).
However the template works fine for me.

Is there any easy way to convert this template from 2.3 to 2.4 or to version3?

Thanks in advance for your time.

4

HTML & templates / HFS 3 Clairty theme

« Last post by danny on July 04, 2026, 01:58:50 PM »

Tried HFS 3, but display looks faded/small, and none of the theme plugins helped?  Here's the fix! 

HFS3 > localhost/~/admin > Custom HTML > Section: Style

Code: [Select]

body {background-color:#999;overflow-x:hidden}
.fa-folder:before { content:'\1F4C1';font-family:sans-serif;color:#FFD679; }
.fa-audio:before { color:#0CC;margin-left: .3em; }
.fa-video:before { content:'\1f4fa';font-family:sans-serif;color:#0CC; }
.fa-doc:before { margin-left: .3em; }
.fa-image:before { content:'\1f4f7';font-family:sans-serif; }
.list-wrapper li a { color:darkblue;text-decoration:underline; }
.list-wrapper { max-width:75%;font-size:120%;background:#FFFFF7; }
@media (max-width: 80em) { .list-wrapper {max-width:87%;} .list-wrapper .entry-details {letter-spacing:-0.05em;} }
@media (max-width: 68em) { .list-wrapper {font-size:110%;max-width:100%;letter-spacing:-0.07em;} .list-wrapper li a {font-size:120%;letter-spacing:-0.06em;} }
@media (max-width: 42em) { .list-wrapper {font-size:90%;max-width:100%;letter-spacing:-0.1em;white-space:nowrap;overflow:hidden;} .list-wrapper li a {font-size:130%;letter-spacing:-0.07em;} .list-wrapper .entry-details {display:none;} }
#paging { display:none }

HFS3 > localhost/~/admin > Custom HTML > Section: After Header

Code: [Select]

<style class="removeAtBoot">@media (prefers-color-scheme: dark) { html, #root { background-color:revert;color:revert; } }</style>

HFS3 > localhost/~/admin > Options > Front End: Page Size

Code: [Select]

1000

Notes:
1).  Remember to save after each entry--sometimes the save function is a little disk glyph, which goes encircled when you need to click it.
2).  This is the initial release of Clarity theme and doesn't have the calc method for 4k screens, but you'll find the very small amount of code straightforward about what it does, except:  The categories are additive, because a 42em wide screen also qualifies for the other sizes; so, the % affect each other (check any modifications by refreshing and then resizing the width of your browser window). 
3).  The display speed of HFS3 is similar to running the default24.tpl (HFS2.4 style) template on top of HFS2x.  However, the download speed of HFS3 is 750 megabits, or the download speed of HFS2xLite is 360 megabits (when compared on the same setup just now).  For preventing ridicule/frights from browsers, HFS3 wins that comparison by providing HTTPS support and Let's Encrypt certificate generation.  And, HFS 3 can run on Linux, which is safer in the many conditions where Windows is not, including your house.

Works with the built-in/default theme of HFS3.2RC8. 
Purpose:  Clarity, Contrast, Size, Icons in Color

5

HFS ~ HTTP File Server / HFS2x Update Project Complete

« Last post by danny on April 01, 2026, 01:11:21 AM »

Thanks!  However, this particular project completed satisfactorily. 
Approximately 4000 of HFS2x servers are updated.
The lite version keeps up with 300+ megabit fiber internet.
It is very conservative with drive access, for compatibility with mechanical drives.
It is easy to do significant appearance customization without creating software code to do so.
CVE's blocked, performance doubled, limits validated, crash bug deleted, on/off bug bypassed, exec disabled.

Download Links (unsigned, does not pass AV because I didn't pay for that):
The same fast lite version running my server:  https://startfetch.com/hfs/HFS2x_2026.zip
Translate version (replace 2.3m):  https://startfetch.com/hfs/HFS23N_2026.zip

Or HFS Lite S (most popular) or HFS Lite T that are are stored on the forum at 1/2 megabyte size; Use peazip or zpaq to uncompress.

Notes:
1). This lite version has a small efficient onboard template.  A collection of larger templates for HFS Lite, is attached below.  If you have a large template set as primary, you can still use others this way:  The view can be customized, such as make a copy of stripes or throwback, named hfs.diff.tpl and dropping that in a folder, can change the view for that particular folder.  The method is handy for a clean straightforward distribution folder. 
2). Good security practice for HFS2x is to make the root folder non-browsable.  To achieve it:  Look at the left-side panel 'Virtual File System' (vfs), Right-click (house icon) / and then properties. Of the tabs at the top of the properties menu, choose Flags, and clear the Browsable checkbox.  And, then make a browsable subfolder (preferably password protected).  For access, you could just type the subfolder-name after your dynamic dns address, Or, it is possible to refer to that subfolder by an online redirector/frameset. 
3). The ongoing decline of Windows has caused a trend with Small Business seeking the safe haven of Linux, Macbook, iPad.  But, Windows no longer provides safety for server software, nor concept of ownership.  So, it is no longer useful to update noncommercial Windows software.  Therefore, I believe we should go find out what HFS3 can do within the safe haven of Linux.  See the:  Clarity theme for HFS 3

6

HFS ~ HTTP File Server / Re: HFS v2.x security update By DANNY

« Last post by rejetto on March 25, 2026, 08:53:53 AM »

I've just completed another round of security inspection and didn't find anything big.

i suggest you to install codex and ask it to find security bugs by also making a script to verify it's real and not just theory

7

HFS ~ HTTP File Server / Re: Shield for HFS 2

« Last post by rejetto on March 17, 2026, 09:54:28 AM »

you put a lot of effort into keeping hfs 2 working.
is that easier than using hfs 3 ?

8

HFS ~ HTTP File Server / Shield for HFS 2

« Last post by nivigor on February 11, 2026, 01:53:23 PM »

I've been using HFS 2.3x for a long time. Due to security concerns, I use a simple filtering reverse proxy server, https2http. The server only allows requests with certain query strings. By default, only the following queries are allowed: ?recursive, ?tpl=list&folders-filter=%5C&recursive, ?sort=t, ?sort=t&rev=1, ?sort=d, ?sort=d&rev=1, ?sort=n, ?sort=n&rev=1, ?sort=n, ?sort=n&rev=1, ?sort=s, ?sort=s&rev=1, ?sort=e, ?sort=e&rev=1.

However, https2http can work over the HTTPS protocol, but you'll need a domain name and certificates. Getting a free third-level domain name is easy. I got nivigor.mooo.com from FreeDNS. I get Let's Encrypt certificates automatically using Certbot. But certbot use an HTTP request to verify website ownership using a .well-known directory. That's why I use a redirect2https. For requests with the specified path, it can act as a file server, and it redirects other requests to an HTTPS server.
Now my HFS 2.3 is secure and works via the HTTPS protocol, accessible as https://nivigor.mooo.com, and certificates are updated automatically.

I've installed HFS 3 on NAS and will be trying it out slowly.

9

Everything else / registration

« Last post by rejetto on February 01, 2026, 04:24:08 PM »

guys, i've spent 2 hours trying to get emails working again on this forum, but to no avail.
now the it sends emails but they are empty.
things have changed both on my hosting service and on gmail (i used before, to send).
if someone needs an account, you can write to me a@rejetto.com and i'll make one with a temporary password that you can change later.
this seems to be the only way that won't open the doors to the spam bots.
that's it for the time being.

10

HFS ~ HTTP File Server / 2026 security update - Happy New Year!

« Last post by danny on December 23, 2025, 07:19:50 PM »

I've just completed another round of security inspection and didn't find anything big.
However, the update does spend less cpu time on bots, so it can serve more real people.

The new Lite version is available here.
It can run bigger templates just fine.