What are the security threats of enabling php zip extension?

Mugoma

• January 16, 2017 09:39

By default EasyApache doesn't compile with php zip extension. But we have had several users asking for it. Are there any risks of enabling php zip extension?

• 

  cPanelMichael

  • January 16, 2017 16:58

  Hello, You can find discussion of this topic on the following third-party URL: What are the security threats of zip file uploads and what preventive actions should be taken? Thank you.

  0
• 

  Mugoma

  • January 16, 2017 21:24

  I had already seen that link. The link discusses about zip file uploads while my question is about 'PHP zip extension'. I am not conversant with the extension but don't think it has anything to do with uploading files.

  0
• 

  cPanelMichael

  • January 23, 2017 17:04

  Hello, I'm not aware of any security issues with the PHP Zip extension itself. The security discussion would likely relate more-so the inclusion of malicious files in the zip archives that a PHP script would read. That said, we do provide a list of system administration service companies if you'd like specific security-related advice: System Administration Services | cPanel Forums Thanks!

  0

Please sign in to leave a comment.