Skip to content

Conversation

SmiSoft
Copy link

@SmiSoft SmiSoft commented Mar 30, 2018

  1. Unzip and zip operations swapped. Now, zipper works before unzipper and unzipper can show recently zipped archive.
  2. Multi-status messages support. Now, zipper's message don't shadow unzipper's message (that some archives found).
  3. Unzip form made hidden, if no archives to extract.
  4. Added password-protection.

…r and unzipper can show recently zipped archive.

2. Multi-status messages support. Now, zipper's message don't shadow unzipper's message (that some archives found).
3. Unzip form made hidden, if no archives to extract.
4. Added password-protection.
(If you still run PHP < 5.6 you should consider updating PHP. These old PHP versions do not get any security updates and your site may be vulnerable.)

## Security
* Don't leave utility on production server. It can easily be used to extract sensitive information (like configuration files with login/password to your database server). Delete it right after usage.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Exactly this. Also the script contains a few vulnerabilities so it's not recommended to leave it accessible for everyone on a webserver.

This section should be added to the readme.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants