Click here to Skip to main content
15,943,798 members
Articles / Web Development / ASP.NET

Web File Manager

Rate me:
Please Sign up or sign in to vote.
4.79/5 (66 votes)
9 Jan 20055 min read 548.3K   16.3K   220   129
A single page ASP.NET file management utility.

Sample Image - WebFileManager.gif


I often deploy ASP.NET websites to servers that I don't control. In these situations, I can't get to the underlying file system to do any file maintenance, because I don't have direct access to the server. So I have to access the file system indirectly, through the website that I am deploying. Rather than writing a bunch of special purpose pages to deal with file management, I developed a generic WebFileManager page than can be dropped into any ASP.NET website. This page performs the most common file and folder operations:

  • Uploading
  • Deleting
  • Renaming
  • Copying
  • Zipping
  • Moving

Adding WebFileManager to an existing ASP.NET project is relatively straightforward. It can be done in one of two ways:

Deployment as Inline Code

The first method, and I think the easiest, is to deploy the inline code version of WebFileManager: default-inline.aspx. Make a copy of this file and rename it default.aspx. Copy the WebFileManager folder to your web server. This folder only needs the following files:

  • \WebFileManager\default.aspx (renamed from default-inline.aspx)
  • \WebFileManager\images\file\*.gif
  • \WebFileManager\images\icon\*.gif

And you're done! The main advantage of this approach is that it doesn't require any changes to Web.config and thus doesn't force the app to restart. The downside is that the inline version of the page must be converted from the code-behind master; inline pages are a pain to debug and maintain.

Deployment as Code-Behind

If you're more comfortable with a typical code-behind page, that can also be deployed relatively easily: default.aspx is the master, code-behind version of WebFileManager.

  1. Copy the WebFileManager folder to your web server. This folder only needs the following files:
    • \WebFileManager\default.aspx
    • \WebFileManager\bin\WebFileManager.dll
    • \WebFileManager\images\file\*.gif
    • \WebFileManager\images\icon\*.gif
  2. Because code-behind generates a separate assembly DLL, you have to let the main webapp know where to find this file. Modify Web.config as follows:
      <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
         privatePath="" />
  3. The page should now load using all default settings. If you want to override the defaults, see the configuration table later in this article for additional Web.config keys.

Whichever method of deployment you use, the new ZIP functionality requires ICSharpCode.SharpZipLib.dll to be present somewhere. I find that most of my web projects have this dependency already, but your mileage may vary. If you don't want this dependency, you'll need to comment out the ZIP code in the source. It's all in one function, so it isn't hard to remove.

Things to watch out for

Bear in mind that file system operations will occur as the ASP.NET process account by default (machinename\ASPNET), not as the user accessing the page! Any permission errors during a file operation will be trapped and echoed at the top of the page. So if you're wondering "Why can't I upload a file?" or "Why can't I delete that annoying folder?", it's typically because the ASPNET account doesn't have enough filesystem permissions to do so.

It's not included in the sample project, but there are a couple of reasons why you may also want to create a custom, local \WebFileManager\Web.config file:

  • If you want file operations to occur as a specific user: enable impersonation.
  • If you want to restrict access: set authorization.

Don't forget that web.config settings work fine on a per-folder basis, which is ideal for this purpose-- you can grant access to only a few users, or have the entire page run as administrator, without affecting the rest of the website.


I'll warn you up front: this page is not a model of proper ASP.NET design. It uses Response.Write extensively, and does not use a single server control. I kept it deliberately old school, because I wanted a minimal amount of code and tight control of the HTML produced. I don't recommend this approach for a larger project, but I think it's OK for a single utility page.

As for the code, there is a handful of static HTML in default.aspx, and an associated code-behind class. The static HTML contains some JavaScript and a basic stylesheet, as well as the HTML page template. The page body, however, is rendered by the WriteTable method.

The main loop is very straightforward: it iterates through every directory and file in the current directory, and copies that to a simple DataTable structure, which is then sorted into a DataView and dumped to the output buffer in a simplified table format. The table is designed to render progressively using the "table-layout:fixed" style attribute:

With Response
  .Write("<TD align=right><INPUT name=""")
  .Write(""" type=checkbox>")
  .Write("<TD align=center><IMG src=""")
  .Write(""" ")
  .Write("<TD align=right>")
  If blnFolder Then
    .Write("<TD align=left>")
    .Write("<TD align=left>kb")
  End If
  .Write("<TD align=right>")
  .Write("<TD align=right>")
  .Write("<TD align=right>")
End With

File and folder operations are triggered by the checkboxes next to each row and a hidden form field with an action string. The JavaScript functions do some basic client-side error checking, set the action form field appropriately, and submit the form. On postback, the HandleAction method is called:

Public Sub HandleAction()
    If Request.Form(_strActionTag) Is Nothing Then Return

    Dim strAction As String = Request.Form(_strActionTag).ToLower
    If strAction = "" Then Return

    Select Case strAction
        Case "newfolder"
        Case "upload"
        Case Else
    End Select
    If Not _FileOperationException Is Nothing Then
    End If
End Sub

I am capturing any file operation failures into a class level variable _FileOperationException. If a file delete fails because the ASPNET process doesn't have access to it, we just want to display a simple message-- not throw a massive exception all the way up to the main application.


This page does have a few configuration options it looks for in Web.config. These are all optional.

<add key="WebFileManager/ImagePath" 
        value= "resources/WebFileManager/images/" />
<add key="WebFileManager/HideFolderPattern" 
        value= "^bin|test" />
<add key="WebFileManager/HideFilePattern" 
        value= "scc$" />
<add key="WebFileManager/AllowedPathPattern" 
        value= "/MyWeb/Uploads/.*" />
<add key="WebFileManager/DefaultPath" 
        value= "~/MyWeb/Uploads" />
ImagePath"images/"Root-relative path to the file/*.gif and icon/*.gif images used on the page.
HideFolderPattern""Folder names matching this regular expression will not be displayed.
HideFilePattern""File names matching this regular expression will not be displayed
AllowedPathPattern""The user will only be allowed to navigate to paths that match this pattern.
DefaultPath"~/"Default path that will be displayed if no path is specified in the path= QueryString.
FlushContentFalseIssue a Response.Flush after writing each table row. Renders faster, but some HttpModules don't work with partial content.


WebFileManager is a simple page, but it has worked well for me in a number of projects. Hopefully, it'll work for you too.

There are many more details and comments in the demonstration solution provided at the top of the article, so check it out. And please don't hesitate to provide feedback, good or bad! I hope you enjoyed this article. If you did, you may also like my other articles as well.


  • Friday, November 26, 2004 - published
  • Wednesday, January 5, 2005 - Version 1.1
    • Added persistent up/down column sorting by clicking column headers
    • Default sort is now by name instead of "as returned by .NET functions"
    • Added ability to ZIP files using SharpZipLib
    • Improved FireFox support (FireFox doesn't support <COLGROUP> alignments?!)
    • Move and Copy now create destination folders if it doesn't exist.


This article has no explicit license attached to it but may contain usage terms in the article text or the download files themselves. If in doubt please contact the author via the discussion board below.

A list of licenses authors might use can be found here

Written By
Web Developer
United States United States
My name is Jeff Atwood. I live in Berkeley, CA with my wife, two cats, and far more computers than I care to mention. My first computer was the Texas Instruments TI-99/4a. I've been a Microsoft Windows developer since 1992; primarily in VB. I am particularly interested in best practices and human factors in software development, as represented in my recommended developer reading list. I also have a coding and human factors related blog at

Comments and Discussions

Question"404 - File or directory not found" when browsing web.config file Pin
Behzad Sedighzadeh29-Jun-14 11:20
Behzad Sedighzadeh29-Jun-14 11:20 
QuestionCongrats Pin
pgraca13-Dec-13 5:36
pgraca13-Dec-13 5:36 
AnswerRe: Congrats Pin
QMasters15-May-18 5:44
professionalQMasters15-May-18 5:44 
QuestionDoesn't work with authorization Pin
Ivan Ivanoff6-Nov-13 3:34
Ivan Ivanoff6-Nov-13 3:34 
QuestionMy vote of 5 Pin
bradut17-Oct-12 19:55
professionalbradut17-Oct-12 19:55 
Answerupload file 32MB - system error Pin
K@nT4-Oct-12 21:46
K@nT4-Oct-12 21:46 
QuestionWebFileManager.dll is missing Pin
josephLeonor25-Jul-12 22:13
josephLeonor25-Jul-12 22:13 
AnswerRe: WebFileManager.dll is missing Pin
bradut17-Oct-12 19:54
professionalbradut17-Oct-12 19:54 
AnswerRe: WebFileManager.dll is missing Pin
lcorderof6-Sep-18 18:54
professionallcorderof6-Sep-18 18:54 
GeneralMy vote of 5 Pin
Md. Marufuzzaman11-Apr-12 8:59
professionalMd. Marufuzzaman11-Apr-12 8:59 
GeneralMy vote of 5 Pin
feet827-Mar-12 17:18
feet827-Mar-12 17:18 
Questiongreat Pin
feet827-Mar-12 15:49
feet827-Mar-12 15:49 
Questionshow the host path instead of virtual path Pin
hamed.taghinejad10-Mar-12 8:18
hamed.taghinejad10-Mar-12 8:18 
GeneralMy vote of 1 Pin
Syed J Hashmi6-Mar-12 7:40
Syed J Hashmi6-Mar-12 7:40 
QuestionWhen control is embeded in a master page Pin
Orgrim7910-Feb-12 2:35
Orgrim7910-Feb-12 2:35 
SuggestionPrevent directory hijacking Pin
Orgrim799-Feb-12 10:14
Orgrim799-Feb-12 10:14 
QuestionStarting folder question Pin
mustang-gx16-Aug-11 0:50
mustang-gx16-Aug-11 0:50 
GeneralError <%@ Application Codebehind="Global.asax.vb" Inherits="WebFileManager.Global" %> Pin
dinesh_ahuja3-Apr-11 8:13
dinesh_ahuja3-Apr-11 8:13 
NewsRewrote as Asp.Net user control. Pin
kintz16-Feb-11 8:27
kintz16-Feb-11 8:27 
GeneralRe: Rewrote as Asp.Net user control. Pin
Heinnge25-Mar-11 22:28
Heinnge25-Mar-11 22:28 
GeneralRe: Rewrote as Asp.Net user control. Pin
woakinyele7-Oct-11 8:39
woakinyele7-Oct-11 8:39 
GeneralRe: Rewrote as Asp.Net user control. Pin
Member 126818867-Feb-20 11:19
Member 126818867-Feb-20 11:19 
GeneralWebFileManager.dll missing Pin
AJITHKUMARAJ2-Oct-10 18:44
AJITHKUMARAJ2-Oct-10 18:44 
GeneralMy vote of 5 Pin
marcelb3332-Sep-10 5:39
marcelb3332-Sep-10 5:39 
GeneralAnybody can send me the WebFileManager.dll Pin
1984jojo7-Jul-10 22:52
1984jojo7-Jul-10 22:52 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.