Zip Attachments

This extension allows your users to decide if they want an attachment to be zipped up upon upload. The file(s) are zipped before VB checks the size limit. It always annoyed me when I have to post a text document and it is too big for that extension setting. Zipping a text file greatly reduces the size.

This extension should also save space in your attachments database as all new files will be compressed with the zip method.

Installation is simple:

1. Upload the zip.lib.php file to your forums directory.

2. Upload the xml file as a plugin.

3. Tiny edit to template newattachment.

4. Click Install

I will support here as I have time.

This modification is FREE of charge, but if you wish to reward me for my work, and encourage future modifications by me, please donate below:

[FleaBag]

Yeah this is nice!

[puertoblack2003]

love it ******INSTALLED**********

[Snake]

Nice!

[theArchitect]

Originally Posted by Jafo232

There really isn't one. Your users currently have the right to upload zip files I assume? If so, there really is no difference.

You are correct that this hack is not a security risk as most forums will allow the uploading of .zip files.

I think that OK was saying was that .zip files in general can be a security risk. Just as when you get a virus e-mail with a .zip file in it and the recipient thinks, "what is in the .zip file". They open it and hey presto a virus leaps out at them.

[akanevsky]

Where did you get this version of zip.lib.php from?

[Jafo232]

Originally Posted by Psionic Vision

Where did you get this version of zip.lib.php from?

http://www.weberdev.com/get_example-4066.html

[akanevsky]

Originally Posted by Jafo232

http://www.weberdev.com/get_example-4066.html

Thanks

[silurius]

Based on what I am reading in this thread, my assumption is that this hack does not actually look at the file types being uploaded prior to zipping them up into an archive? Even if this is true it's still a great hack.

I still think some overview of general .zip security considerations may be in order, even if this particular hack doesn't fundamentally alter anything.

[Jafo232]

Originally Posted by silurius

Based on what I am reading in this thread, my assumption is that this hack does not actually look at the file types being uploaded prior to zipping them up into an archive? Even if this is true it's still a great hack.

I still think some overview of general .zip security considerations may be in order, even if this particular hack doesn't fundamentally alter anything.

That may be the case, but unless your unzip utility is a trojan, unzipping files will not cause you to be infected.

If you already allow the zip extension, then this extension is for you, otherwise, wait until I release the version that scans files for virii..

[Jafo232]

Originally Posted by silurius

Based on what I am reading in this thread, my assumption is that this hack does not actually look at the file types being uploaded prior to zipping them up into an archive?

The unmodified version of XB does not check file types IN a zip file, but yet accepts them.