ZIP to PHP converter

[scancode]

This is a small application that converts a ZIP file into a self-extracting PHP file. Simply upload it to your webserver, call it once, then delete it.

Requested by icekin on teh IRC channel.

[housetier]

This is a very cool idea! Can it cope with tarballs (.tar or .tar.gz) as well?

[gjehle]

you, sir, are awesome.
this is simply ingenious.

[f0dder]

But what's the point?

Are there hosts which allow you to run PHP scripts but don't give FTP access? And don't allow .zip files from web-based upload forms? O_o

[scancode]

This is a very cool idea! Can it cope with tarballs (.tar or .tar.gz) as well?

Not yet, mebbe I should add it.

you, sir, are awesome.
this is simply ingenious.

Thanks.

But what's the point?

Are there hosts which allow you to run PHP scripts but don't give FTP access? And don't allow .zip files from web-based upload forms? O_o

The problem is not uploading the zips, but unzipping them server-side.
Uploading a crapload of small files takes ages over FTP.

[f0dder]

But what's the point?

Are there hosts which allow you to run PHP scripts but don't give FTP access? And don't allow .zip files from web-based upload forms? O_o

The problem is not uploading the zips, but unzipping them server-side.
Uploading a crapload of small files takes ages over FTP.

Ooooh, duh! - I thought self-extracting meant "generate .zip output". Facepalm, more coffee to me - this could be pretty darn useful when you don't have shell support

[Deozaan]

That looks pretty awesome!

[Stoic Joker]

Any chance that could be done with .asp also (e.g. zip2asp)?

[Tuxman]

Now I needed this a few weeks ago. 
Maybe it could be useful on next Wordpress update... thank you!

[Deozaan]

Any chance you can do this with exe too? Just kidding.

Again, awesome utility here.

[scancode]

Any chance you can do this with exe too? Just kidding.

Again, awesome utility here.

EXE: use your favourite archiver. WinRAR, WinZIP, WinACE, 7Zip all do SFXs
As soon as I get ASP to work there will be an ASP version (will prolly involve two files instead of one tho)

[Deozaan]

Any chance you can do this with exe too? Just kidding.

Again, awesome utility here.

EXE: use your favourite archiver. WinRAR, WinZIP, WinACE, 7Zip all do SFXs
As soon as I get ASP to work there will be an ASP version (will prolly involve two files instead of one tho)

Er.. What I meant was EXE2PHP. So I could execute an executable on a server via PHP. But like I said it was a joke.

[scancode]

Any chance you can do this with exe too? Just kidding.

Again, awesome utility here.

EXE: use your favourite archiver. WinRAR, WinZIP, WinACE, 7Zip all do SFXs
As soon as I get ASP to work there will be an ASP version (will prolly involve two files instead of one tho)

Er.. What I meant was EXE2PHP. So I could execute an executable on a server via PHP. But like I said it was a joke.

Ever heard of system()?

[VictorM]

afraid I can see how this can be used together with a successful injection attack to deploy on a single session. yet, very interesting.

[Tuxman]

Injecting files is not actually dangerous yet.

[f0dder]

Injecting files is not actually dangerous yet.

[Stoic Joker]

Injecting files is not actually dangerous yet.

ROFL (I had same reaction)

[Tuxman]

Unpacking a ZIP file on the server does not automatically cause any danger. How?

[Stoic Joker]

Unpacking a ZIP file on the server does not automatically cause any danger. How?

Kinda depends on what's in the file...

...Sure the server isn't in any danger (unless you count reputation) but the visitors..?

[Tuxman]

The visitors need a link to the file anyway. Where should that be?

[Stoic Joker]

The visitors need a link to the file anyway. Where should that be?

You're kidding, right?

[Tuxman]

No, why?

[f0dder]

The visitors need a link to the file anyway. Where should that be?

*facepalm*

If you have the possibility to inject a zippedfile.php on a server and then run it... what harm could you possibly do? Nobody would think of putting index.php in that sfx-zip, of course no... and certainly nobody would put a connect-back shell, would they? Definitely harmless

[Tuxman]

Depends. Does unzipping always overwrite files? It actually shouldn't. (So who cares about index.php?)

[f0dder]

Depends. Does unzipping always overwrite files? It actually shouldn't.

For the intended use of this program (as I understand it: upgrading websites, especially pre-fab systems), it should.

(So who cares about index.php?)

Ask any website owner who has his site defaced