Extract only extensions specific to a ZIP

Question

I am developing a system where in some part of it the client can send a file ZIP containing only images.

I’m willing to do it in a way that I can extract from this ZIP only files that contain specific image extensions.

I know that in PHP, when we list only one existing extension type in a directory, we use the function glob to do this.

Is there any way to do a similar operation with the class ZipArchive of PHP?

If anyone knows any plugin on Laravel that does something of the kind, it will be very useful such information.

Note: The Ziparchive::extractTo() method accepts a second parameter, which is an array of files from white list of the files that will be extracted.

It would be nice if that also worked with a glob brace!

Answer 1

Use the library Extractor, that extracts the compressed files and returns an object Finder package Symfony\Component, documentation here.

See the example for your situation:

$temporaryDirectory = new Mmoreram\Extractor\Filesystem\TemporaryDirectory();
$extensionResolver = new Mmoreram\Extractor\Resolver\ExtensionResolver;
$extractor = new Mmoreram\Extractor\Extractor($temporaryDirectory, $extensionResolver);

$finder = $extractor->extractFromFile($uploadFile);

$validMimes = ["image/png", "image/jpg"];

$filter = function(\SplFileInfo $path) {
    $file = new File($path);

    if (in_array($file->getMimeType(), $validMimes)) {
        return true;
    }
};

$validFiles = $finder->files()->filter($filter);

Answer 2

Based on the advice given by @Rodigorigotti, I developed a code to delete undesirable extension files. The extraction is done to a secure folder, so as not to give direct access to the folder to the user (thus avoiding a PHP Injection).

 public function postAjaxUploadZip($id) {   
        $file = Input::file('zip');

        $rules = [
            'zip' => 'required|mimes:zip'
        ];

        $messages = [
            'mimes' => "Extensão de arquivo inválida"
        ];

        $validation = Validator::make(Input::all(), $rules, $messages);


        if ($validation->passes()) {

            try{

                $zip = $file->getRealPath();

                $zipObject =  new ZipArchive;
                if (! $zipObject->open($zip)) {

                    throw new RunTimeException('Não foi possível abrir o arquivo enviado');
                }

                $path = base_path("secure/{$id}");  

                if (! File::isDirectory($path)) {

                    File::makeDirectory($path, 0755);
                }

                // Extrai para uma pasta segura, para o usuário não ter acesso a esses arquivos pelo pasta "public" do Laravel
                $zipObject->extractTo($path);

                // Itera com os arquivos do diretório onde houve a extração

                $files = new FileSystemIterator($path);

                foreach ($files as $file) {

                   $data = [
                      'file' => $file->getRealPath()
                   ];

                   $rules = ['file' => 'mimes:jpg,png,bmp,jpeg'];

                   if (Validator::make($data, $rules)->fails()) {

                      $deletedFiles[] = $file->getFilename();

                   }

                }   

                File::delete($filesToDelete);


            } catch (Exception $e) {

                return Response::json([
                    'error'     => $e->getMessage(),
                    'directory' => $path,
                ]);
            }


            return Response::json([
                'error' => false, 
                'deletedFiles' => $filesToDelete
            ]);

        } else {

            return Response::json(['error' => $validation->messages()]);    
        }
    }

If anyone has a better idea, it’ll be a big help. The less code the better!