Skip to content
Carl Victor Fontanos
Carl Victor Fontanos

Carl Victor Fontanos

Software Engineer

I build web applications and share what I learn along the way.

© 2026

Filoby - PHP File Manager

v1.0.4 Updated Jul 16, 2026
Try it yourself - explore the live demo A fully interactive sandbox loaded with sample data. Create, edit and delete freely - no signup required.

A complete file manager, in a single PHP file

Filoby turns any folder on your web hosting into a modern, full-featured file manager. Upload one PHP file, open it in your browser, and a one-minute wizard sets everything up. From then on you can browse, upload, edit, preview, search and share everything on your server, from any device, wherever you are.

There is no database to create: settings, users and logs live in a small data folder that Filoby manages by itself. There is no composer install, no node, no build step, and no config file to hand-edit. And because it runs on your own hosting, your files never pass through anyone else's cloud, and there is no monthly fee.

Try it before you buy it

The live demo further down this page is the complete application running on real files, with nothing to sign up for. Create folders, edit code, upload images, delete things - and press Reset when you are done.

Manage exactly the folders you choose

During setup you pick the first folder Filoby manages, and you can add more root folders at any time from the admin panel: a client uploads directory, a backups folder, the public folder of another site on the same server. Every root you add appears in the sidebar, and search covers all of them at once.

Just as important is what stays out of reach. Nobody can browse outside the roots you allow, each user can be limited to their own home folder, and per-folder permissions decide exactly who can see, change or delete what.

Everything you need, built in

Browsing that fits the way you work

Switch between a dense list for serious work, a grid for a quick overview, a photo-friendly mosaic, and Miller columns for deep folder trees. Sort by name, size, type or date - Filoby remembers your choice for every folder. Pin your favourite folders, jump back to recent ones from the sidebar, and show or hide dotfiles with a click.

Uploads that finish

Drag and drop files of any size. Uploads are chunked and resumable, so a dropped connection carries on where it left off instead of starting over. Upload whole folders, follow the progress of every file, and keep working while they run. Moving, copying, renaming, cut and paste between folders, and bulk actions across large selections all work the way you would hope.

Open anything without downloading it

A genuine code editor is built in, with syntax highlighting for dozens of languages, find and replace, a split view, and drafts that survive if you navigate away. Preview images, video, audio, PDFs and Markdown right where they are. Open spreadsheets (xlsx, csv, ods) in an editable grid and save straight back. Preview Word documents without leaving the page. The image viewer is a proper gallery, with zoom, pan, swipe and a slideshow.

Search that finds it, wherever it is

Search every root folder at once by filename, or press Shift+Enter to search inside file contents when you cannot remember what something was called. Every result shows where it lives and takes you straight there. Prefer the keyboard? Ctrl+K opens a command palette that jumps anywhere.

Archives without the detour

Zip any selection and unzip in place. Better still, browse inside an archive and pull out the one file you need without extracting the rest.

Share files, keep control

Create a private link to any file or folder, set an expiry date, add a password, and revoke it whenever you like. The recipient sees a clean download page and nothing else: no account required, and no access to anything you did not share.

Invite your team, or your clients

Give people their own logins, assign roles, and use per-folder permissions to decide who reaches what. A client can have one folder and never know the rest exists. A contractor can be read-only. Set storage quotas, review active sessions, protect accounts with two-factor authentication, and follow everything in the audit log.

Room to make mistakes

Deleted files land in a trash you can restore from. Bulk operations keep an undo history. Edited files keep version history, so the copy from an hour ago is one click away. Long-running jobs work in the background without tying up your browser.

See where your disk space went

A visual disk map shows what is taking up space at a glance, with dedicated finders for your largest files, duplicates and empty folders.

Make it feel like yours

Light and dark themes that follow your system, your own accent colour, adjustable density and font size, and your logo and name across the top. On phones and tablets you get a real touch layout with its own action bar and gestures, not a shrunken desktop.

Security that is enforced, not implied

Filoby lives on your server and touches your files, so it is engineered accordingly. Paths are jailed to the roots you allow. Every action is permission-checked on the server, never just hidden in the interface. Passwords are hashed with argon2id, sign-ins are rate-limited, uploads that disguise executables are rejected, and archive extraction is protected against zip-slip attacks. The application file and its own data folder cannot be touched through the manager.

Updates are digitally signed and checksum-verified against the key built into your copy before anything installs. Filoby backs itself up ahead of every update and can roll back with one click.

Call the file whatever you like

Filoby ships as index.php, so if you place it in /files/ your manager loads at yoursite.com/files/. If you would rather keep it discreet, rename the file to anything at all, say my-files.php, and it runs from yoursite.com/files/my-files.php instead. The data folder, your share links, self-protection and one-click updates all follow the new name automatically - there is nothing to configure.

One honest note: a hard-to-guess filename makes Filoby less likely to be stumbled across, but it is not a security measure. Your login is what protects it.

What counts as a site (worth reading before you choose)

One hostname is one site. It is a simple rule, and knowing it up front means you buy the right licence the first time:

  • example.com is one site.
  • blog.example.com is a second, separate site. So is shop.example.com, and so is staging.example.com. Every subdomain needs its own slot.
  • www.example.com and example.com count as the same site. The www prefix never costs you a slot.
  • Local and development hosts are always free: localhost, anything ending in .test or .local, and private IP addresses never use one up.

So the Single Site licence at $49 covers one hostname - not a domain plus its subdomains. Planning to run Filoby on example.com and blog.example.com? That is two sites, and Multi Site is the licence you want.

Nothing is locked in forever. Release a site and register a different one whenever you like, or upgrade at any time and pay only the difference.

Up and running in about a minute

  1. Upload the file to your web hosting, inside the folder you want to manage. Many people use a subfolder such as /files/. Keep the name index.php, or rename it if you prefer.
  2. Open it in your browser (for example https://yoursite.com/files/). A short wizard checks your server, lets you pick the folder to manage, and creates your admin account.
  3. Activate your licence. Go to Admin panel → Licence, paste the key from your purchase email, and press Activate.

Filoby registers the domain it is running on automatically, so there is nothing to type in and nothing to match up by hand. Your key is always available from your account here, and the same steps are included in the README inside your download.

Moving to a different domain later? Release the old site from the Licence screen or your account page, then activate the same key on the new one.

One payment, yours for good

Every licence includes lifetime updates: pay once, and every future version is already yours. No subscription, no renewal, no upgrade fees. And if Filoby turns out not to be for you, there is a 30 day money-back guarantee, no questions asked.

Try it right here

The real application, running on real files. Nothing to sign up for, and nothing you can break that a Reset will not fix.

Loads the full app right here on the page.

or open it in a new tab →

The demo is fully unlocked. Updates, adding new root folders and licence activation are switched off in it - everything else is the product exactly as you would run it.

Choose your licence

Every licence is the same software with every feature unlocked. The only difference is how many sites you can run it on. Pay once, and every future version is included.

One hostname is one site, and every subdomain counts as its own site. example.com and blog.example.com are two sites, so the Single Site licence does not cover both. www.example.com does not count separately, and localhost / .test / .local development hosts are always free.

Single Site

For one website you own.

$49.00 once
1 site
Recommended

Multi Site

For a handful of projects, or a domain plus its subdomains.

$119.00 once
5 sites
Best value

Unlimited

For agencies and anyone who runs a lot of sites.

$149.00 once
Unlimited sites
Compare Single Site $49.00 Multi Site $119.00 Unlimited $149.00
Sites you can register 1 site 5 sites Unlimited
Each subdomain counts as its own site Included Included Included
www and the plain domain count as ONE site Included Included Included
Free on localhost and dev domains Included Included Included
Move a site to a new domain any time Included Included Included
Every feature of the app, with nothing held back Included Included Included
Lifetime updates, no renewal Included Included Included
Manage your sites from your account Included Included Included
Upgrade or downgrade whenever you like Included Included Included
30 day money-back guarantee Included Included Included
Email support Included Included Included
Price per site at full use $49.00 $23.80 You decide

Not sure which one? Count the hostnames you will run Filoby on - remembering that each subdomain is one of them. One website and nothing else, and Single Site is right. Either way you can upgrade from your account at any time and only pay the difference.

What's included

  • One PHP file - upload it and you are live
  • Name the file whatever you want - nothing is tied to index.php
  • No database - settings live in flat JSON beside the file
  • A one-minute setup wizard, no config files to hand-edit
  • Manage multiple root folders anywhere on your server
  • Browse, upload, download, rename, move, copy and delete
  • Drag and drop uploads of any size, with resumable chunking
  • Four views: list, grid, gallery mosaic and Miller columns
  • Built-in code editor with syntax highlighting and split view
  • Preview images, video, audio, PDF, Markdown and Office files
  • Edit spreadsheets and preview Word documents in the browser
  • Search every folder at once, by filename or file contents
  • Zip and unzip, plus browse inside archives without extracting
  • Share any file or folder with a private link, expiry and password
  • Multiple users with roles and per-folder permissions
  • Trash, undo, and version history for edited files
  • Two-factor authentication and active session management
  • Light and dark themes that follow your system
  • Works on phones and tablets, not just desktop
  • Secure automatic update checking, never forced

Frequently asked questions

What exactly is Filoby?
Filoby is a complete file manager that runs on your own web hosting. Upload one PHP file, open it in your browser, and you can manage every file on that server: browse folders, upload and download, edit code, preview images and documents, share files with a private link, and give other people their own logins. Think of it as the file manager your host should have given you, except it is yours, it looks good, and it works properly on a phone.
Do I need a database?
No. Filoby stores its settings in a small data folder next to the file itself. There is no database to create, no connection string to configure, and nothing to back up beyond your own files.
What do I need to run it?
PHP 7.4 or newer (8.x recommended) with the standard zip extension, which practically every host enables already. Filoby runs on shared hosting, a VPS, or a local development machine. No database, and no shell access needed. A few extras are optional and only affect the trimmings: GD or Imagick for image thumbnails, exif for photo orientation, and ffmpeg for video poster frames. Without them Filoby still runs perfectly well, you just get generic icons instead of thumbnails. You do not have to work any of this out yourself. The setup wizard checks your server on the first run and tells you in plain English what is missing and what it affects.
Does it have to be called index.php?
No. Nothing in Filoby is tied to that name. It ships as index.php because that gives it the folder's own address: put it in /files/ and your manager is at yoursite.com/files/. Rename it to anything you like - my-files.php, console.php - and it runs from that address instead (yoursite.com/files/my-files.php). Everything follows the new name on its own: the data folder, your share links, the protection that stops the manager from editing or downloading its own file, and one-click updates, which keep replacing the right file whatever you called it. There is nothing to configure and no path to set. One honest note, because it matters: an unusual filename means the manager is far less likely to be stumbled across, but that is not a security measure. It hides the door, it does not lock it. Your login does that, along with rate limiting on failed attempts and optional two-factor authentication.
Can Filoby manage more than one folder?
Yes. During setup you choose the first folder, and you can add more root folders at any time from Admin panel > Roots - any folder on the server, each with its own label. All of them appear in the sidebar, search covers every root at once, and per-folder permissions control who can reach what. The boundary works in both directions: nobody can ever browse outside the roots you allow.
Does Filoby need an internet connection?
Not for your own files. Browsing, uploading, downloading, previewing images and video, search, sharing and every file operation are Filoby's own code and run entirely on your server with no outbound access at all. A few extras borrow a library from a public CDN the first time you open them: the code editor, the diff view, the spreadsheet and Word previews, and the QR image on the two-factor setup screen. On a server with no outbound internet those particular screens will not open, and two-factor falls back to typing the key in rather than scanning it. Nothing else is affected. If your server is firewalled, or you would simply rather not lean on a CDN, there is an ASSETS_SOURCE switch at the top of the file. Set it to 'local', drop the libraries into the assets folder as the README explains, and Filoby serves them from your own server instead. The only thing you lose that way is syntax colouring; the editor itself works normally.
What counts as a site?
One hostname is one site. So example.com is one site, and blog.example.com is a second, separate site - every subdomain needs its own slot. Two things are deliberately free. www.example.com and example.com count as the same single site, because they are the same website. And local or development hosts (localhost, anything ending in .test or .local, and private IP addresses) never use up a slot, so building and testing never costs you a licence.
Does the Single Site licence cover my subdomains?
No, and this is the one thing worth being certain about before you buy. The Single Site licence at $49 covers one hostname. A subdomain is a separate site: if you run Filoby on example.com and on blog.example.com, that is two sites and you need the Multi Site licence. The only exception is www. example.com and www.example.com are treated as the same single site, so the www prefix never costs you an extra slot. If you get this wrong it is not a problem - upgrade from your account at any time and you only pay the difference.
How many sites do I actually need?
Count the hostnames you will run Filoby on. One website, no subdomains? Single Site. A domain plus a few subdomains (example.com, blog.example.com, files.example.com), or a handful of separate projects? That is 3+ sites, so Multi Site (5 sites). An agency, a lot of client sites, or you simply do not want to count? Unlimited. Remember that localhost and .test/.local development hosts are free and never count, and that www does not count separately.
How do I register my license?
Open Filoby, go to the Licence screen, paste the key from your purchase email, and press Activate. That is the whole process. Filoby registers whichever domain it is running on automatically, so there is nothing to type in and nothing to match up by hand. If you would rather add your sites ahead of time, you can do that from your account page on this site.
Can I move Filoby to a different domain?
Yes, at any time. Sign in to your account here, remove the old site, and register the new one. Slots are yours to move around as often as you like.
Can I change my license later?
Yes. You can upgrade or downgrade whenever you want from your account page, and you only pay the difference when you upgrade. If you downgrade, we ask you to remove any sites over the new limit first, so we never cut off a site without you choosing which one.
What happens if I do not register?
Filoby keeps working for browsing, downloading and previewing, so you can always reach your files. Editing, uploading, sharing, user management and other tools stay locked, and an Unregistered badge stays visible until you activate. Nothing is deleted or held hostage.
What does lifetime updates mean?
You pay once and every future version is included, for as long as the product exists. There is no renewal, no maintenance fee, and no point where your copy stops receiving improvements. Filoby checks for updates quietly in the background and tells you when one is ready; it never installs anything without you clicking Update.
Does Filoby phone home?
Only to check your license, and only rarely. It checks about once a day, and it never sends your files, folder names, or anything about your content. It sends the domain it is running on, the version, and your key, which is exactly what is needed to confirm your site is registered. If this site is ever unreachable, Filoby keeps working normally on a grace period rather than locking you out.
Is my money safe if it is not for me?
There is a full 30 day money-back guarantee, no questions asked. There is also a live demo on this page with no signup, so you can try nearly everything before you spend anything.

Changelog

v1.0.4 Latest Jul 16, 2026

The audit log's date column was narrower than the date it had to print, and the cell was set never to wrap - so on every row the timestamp ran straight over the username beside it. The column now fits, and every column in that table truncates politely instead of colliding, so a long username or a wordier date format cannot cause it again.

v1.0.3 Jul 15, 2026

Small consistency fix. The admin tab that opens the licence screen was labelled "License" while the screen itself, the documentation and your purchase email all say "Licence", so instructions pointing you to Admin panel > Licence named a tab that did not quite exist. Everything now agrees.

v1.0.2 Jul 15, 2026

Filoby never required being called index.php - the data folder, share links, self-protection and updates have always followed the actual file - but the app kept saying "index.php" out loud regardless, so anyone who renamed it got told to go and check a file that did not exist on their server. Every message, the setup wizard and the README now use the real filename, and update backups are named after the file they came from instead of always being index_*.bak.

v1.0.1 Jul 15, 2026

Corrects what Filoby tells you about itself. The setup wizard announced a free trial that did not exist, and the message you got when something was locked blamed an expired trial; there is no trial, so both now say plainly that the copy is unregistered and how to fix it. Gating itself is unchanged: an unregistered copy has always stayed fully readable and locked only the tools that change things. The diff and merge view also now works under the offline 'local' assets mode instead of always reaching for a CDN.

v1.0.0 Jul 15, 2026

The first public release of Filoby. A complete file manager in one PHP file: four browsing views, a real code editor, previews for images, video, audio, PDF, Markdown and Office files, spreadsheet editing in the browser, search across every folder, private share links, multiple users with per-folder permissions, trash and undo, two-factor authentication, and signed automatic updates.

You might also like

OnTrack Fully Managed

Your own order tracking website without touching anything technical. I register your domain, set up hosting, install OnTrack with your branding and keep it all running, updates included. From $29 a month, cancel anytime, and everything stays yours.

from$29.00 / month

OnTrack - Order Tracking for Your Customers

Give your customers a professional page where they can watch their order progress from deposit to done. One PHP file, no database, no monthly fees. Upload it to any hosting and you own it.

$29.00
$49.00