subject:"Re\: \[PHP\] Protected ZIP file with password"

Re: [PHP] Protected ZIP file with password

2008-02-20 Thread Daniel Brown

On Feb 19, 2008 9:52 PM, Richard Lynch [EMAIL PROTECTED] wrote:
 For ultimate geekiness, you can install a custom PHP extension I wrote
 to print out the error message matching 127:
 http://l-i-e.com/perror
 :-)

Hmm that could come in handy.  I'm going to take advantage of
your generosity on this one, Lynch.

Thanks!

-- 
/Dan

Daniel P. Brown
Senior Unix Geek
? while(1) { $me = $mind--; sleep(86400); } ?

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Protected ZIP file with password

2008-02-19 Thread Richard Lynch

You can dig out what 127 means from perror, or you can just go with
the usual suspects of paths and permissions.

PHP does not run as you from the command line and does not use
your shell and does not have your environment.

Use FULL PATH everywhere.  E.g.:
exec(/usr/bin/zip /home/www/bastos.com/example/files/, $output,
$error);

Also make sure the PHP User has read/write access to whatever it needs
to do the job.  And be VERY CAREFUL about who else then has access
because of this!!!

For ultimate geekiness, you can install a custom PHP extension I wrote
to print out the error message matching 127:
http://l-i-e.com/perror
:-)

On Mon, February 18, 2008 12:57 pm, Petrus Bastos wrote:
 Hey folks,

I got access to exec method for test! But, it's not working... :(
 the
 function returns 127 and don't create the zip file, I've tested on
 Linux
 command tool and works! Do you have any idea why didn't work?

 Thanks again and sorry for the inconvenience,
 Petrus Bastos.

 On Feb 18, 2008 2:37 PM, Nick Stinemates [EMAIL PROTECTED] wrote:

 Petrus Bastos wrote:
  Richard,
 
   Unfortunately, I can't get out of the zip password rut
 because the
  destination system read only this file format. I can't change the
  destination system.
 
  Thanks,
  Petrus.
 
  On Feb 18, 2008 2:11 PM, Richard Lynch [EMAIL PROTECTED] wrote:
 
 
  On Mon, February 18, 2008 5:59 am, Petrus Bastos wrote:
 
  Thanks again for your worry. So, let's go, here goes my
 situation.
  I'm
  exporting data to another system. That system have an option to
 be
  feed by a
  password protected zip file. The export activity will be occur
 in this
  way:
  the user will generate the file on my application and will put
 this
  file
  into that another system. So, I need generate that file. Maybe
 one
  solution
  is to generate the file unzipped and determine that user should
 zip
  the file
  with password on his Windows or Linux operating system. But, I
 can't
  let
  that responsibility on user hands. So, because that I need to
 generate
  the
  file already protected.
 
  Perhaps you could use SCP (or SSH tunneling) to transfer the file
 from
  system to system, so that it need not ever be visible to the
 outside
  world, and thus not need the rather lame zip password.
 
  Another option would be to take the whole file and 2-way encrypt
 it
  with a public/private key pair, and install the private key on
 the
  receiving server.
 
  In other words, get out of the zip password rut, and protect the
 file
  some other way.
 
  --
  Some people have a gift link here.
  Know what I want?
  I want you to buy a CD from some indie artist.
  http://cdbaby.com/from/lynch
  Yeah, I get a buck. So?
 
 
 
 
 
 Sounds like a creative challenge... this is what makes programmers
 problem solvers. You can write the code, you have the knowledge..
 and
 then you get requirements like this one. How annoying!

 I found out some interesting information researching your issue. It
 seems that encryption by password is actually not built in to ZIP
 itself, but was an implementation detail apps like WinZip added to
 the
 mix. Because of that, the original ZIP libs don't have any notions
 of
 password protection.

 It seems like this isn't a language specific issue, either.

 I think it's time to get creative, Petros. You're in a bind, and I
 assume you need to get this done, so you have the following options
 (in
 the order I would do it in..)
  - Turn on exec()
  - You can use/modify an app I wrote (in python) which accepts UDP
 packets and executed commands based off of it. You can strip out the
 really insecure things and just accept 'zip' commands. The lib/app
 is
 really small and lightweight. There are no dependencies outside of I
 think 3 python modules. If I couldn't turn on exec(), this is the
 route
 I would go.
  - Use some form of file/directory montoring + zip.
  - Pass the request on to an environment that has zip()

 --
 ==
 Nick Stinemates ([EMAIL PROTECTED])
 http://nick.stinemates.org

 AIM: Nick Stinemates
 MSN: [EMAIL PROTECTED]
 Yahoo: [EMAIL PROTECTED]
 ==






-- 
Some people have a gift link here.
Know what I want?
I want you to buy a CD from some indie artist.
http://cdbaby.com/from/lynch
Yeah, I get a buck. So?

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Protected ZIP file with password

2008-02-19 Thread Richard Lynch



On Mon, February 18, 2008 4:16 pm, Shawn McKenzie wrote:
 In your php code you'll need the full path to biblioteca.php and to
 t.zip and the web user will need write permissions to the dir where
 you
 create t.zip.

nitpik:
The user needs write permission to just t.zip

Unless zip does something funky with temp files within the directory
containing t.zip or something weird-o like that?

-- 
Some people have a gift link here.
Know what I want?
I want you to buy a CD from some indie artist.
http://cdbaby.com/from/lynch
Yeah, I get a buck. So?

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Protected ZIP file with password

2008-02-19 Thread Richard Lynch

Use exec() and get any output that may be happening.

I also suspect that the PATH you are using isn't a TRUE path, but some
hacked up thing from your webhost.

Look at the output of ?php phpinfo();? in biblioteca and see what
PHP thinks is the current working directory.

I had one webhost where some kind of chroot jail thingie made the
paths look completely different in FTP, shell and PHP...

On Mon, February 18, 2008 4:32 pm, Petrus Bastos wrote:
I've tried without success...

system(/usr/local/bin/zip -P
/.automount/ipojuca/export/homeg03/golapa/public_html/mapdenguepe128/site/php/biblioteca/t.zip
/.automount/ipojuca/export/homeg03/golapa/public_html/mapdenguepe128/site/php/biblioteca/biblioteca.php,$ret_val);

On Feb 18, 2008 7:16 PM, Shawn McKenzie [EMAIL PROTECTED] wrote:

In your php code you'll need the full path to biblioteca.php and to
t.zip and the web user will need write permissions to the dir where
you
create t.zip.

-Shawn

Petrus Bastos wrote:
Wolf,

I'm sure actually working from the command line.

/usr/local/bin/zip -P t.zip biblioteca.php
adding: biblioteca.php (deflated 73%)

On Feb 18, 2008 6:37 PM, Wolf [EMAIL PROTECTED]
mailto:[EMAIL PROTECTED] wrote:

Petrus Bastos [EMAIL PROTECTED]
mailto:[EMAIL PROTECTED] wrote:
Actually, I don't know anything about FreeBSD. I never
used
this system.
But, here my zip command works fine at command line, why
doesn't
works with
PHP?

! -- SNIP --

Have you talked with your server admins about the use of zip?
Sounds like you have an environment set up by a blind monkey.

Are you sure the command is actually working from the command
line?
What is the command and output?

Wolf

--
Some people have a gift link here.
Know what I want?
I want you to buy a CD from some indie artist.
http://cdbaby.com/from/lynch
Yeah, I get a buck. So?

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

61 matches

Mail list logo