1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
|
<?php
/**
* Piwik - Open source web analytics
*
* @link http://piwik.org
* @license http://www.gnu.org/licenses/gpl-3.0.html GPL v3 or later
*
* @category Piwik
* @package Piwik
*/
/**
* @see libs/PclZip
*/
require_once PIWIK_INCLUDE_PATH . '/libs/PclZip/pclzip.lib.php';
/**
* Unzip wrapper around PclZip
*
* @package Piwik
* @subpackage Piwik_Unzip
*/
class Piwik_Unzip_PclZip implements Piwik_Unzip_Interface
{
/**
* @var PclZip
*/
private $pclzip;
/**
* @var string
*/
public $filename;
/**
* Constructor
*
* @param string $filename Name of the .zip archive
*/
public function __construct($filename) {
$this->pclzip = new PclZip($filename);
$this->filename = $filename;
}
/**
* Extract files from archive to target directory
*
* @param string $pathExtracted Absolute path of target directory
* @return mixed Array of filenames if successful; or 0 if an error occurred
*/
public function extract($pathExtracted) {
$pathExtracted = str_replace('\\', '/', $pathExtracted);
$list = $this->pclzip->listContent();
if (empty($list))
{
return 0;
}
foreach($list as $entry) {
$filename = str_replace('\\', '/', $entry['stored_filename']);
$parts = explode('/', $filename);
if(!strncmp($filename, '/', 1) ||
array_search('..', $parts) !== false ||
strpos($filename, ':') !== false)
{
return 0;
}
}
// PCLZIP_CB_PRE_EXTRACT callback returns 0 to skip, 1 to resume, or 2 to abort
return $this->pclzip->extract(
PCLZIP_OPT_PATH, $pathExtracted,
PCLZIP_OPT_STOP_ON_ERROR,
PCLZIP_OPT_REPLACE_NEWER,
PCLZIP_CB_PRE_EXTRACT, create_function(
'$p_event, &$p_header',
"return strncmp(\$p_header['filename'], '$pathExtracted', strlen('$pathExtracted')) ? 0 : 1;"
)
);
}
/**
* Get error status string for the latest error
*
* @return string
*/
public function errorInfo() {
return $this->pclzip->errorInfo(true);
}
}
|
