Re: Protected ZIP file with password

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Petrus Bastos wrote:
> I'm testing on FreeBSD. I can use any command through system(), but the zip
> command doesn't works! I don't know why.
>
>
> On Feb 18, 2008 4:06 PM, Nick Stinemates <nick@xxxxxxxxxxxxxx> wrote:
>
>   
>> Petrus Bastos wrote:
>>     
>>> Hey folks,
>>>
>>>    I got access to exec method for test! But, it's not working... :(
>>> the function returns 127 and don't create the zip file, I've tested on
>>> Linux command tool and works! Do you have any idea why didn't work?
>>>
>>> Thanks again and sorry for the inconvenience,
>>> Petrus Bastos.
>>>
>>> On Feb 18, 2008 2:37 PM, Nick Stinemates <nick@xxxxxxxxxxxxxx
>>> <mailto:nick@xxxxxxxxxxxxxx>> wrote:
>>>
>>>     Petrus Bastos wrote:
>>>     > Richard,
>>>     >
>>>     >      Unfortunately, I can't get out of the zip password rut
>>>     because the
>>>     > destination system read only this file format. I can't change the
>>>     > destination system.
>>>     >
>>>     > Thanks,
>>>     > Petrus.
>>>     >
>>>     > On Feb 18, 2008 2:11 PM, Richard Lynch <ceo@xxxxxxxxx
>>>     <mailto:ceo@xxxxxxxxx>> wrote:
>>>     >
>>>     >
>>>     >> On Mon, February 18, 2008 5:59 am, Petrus Bastos wrote:
>>>     >>
>>>     >>>     Thanks again for your worry. So, let's go, here goes my
>>>     situation.
>>>     >>> I'm
>>>     >>> exporting data to another system. That system have an option to
>>>       
>> be
>>     
>>>     >>> feed by a
>>>     >>> password protected zip file. The export activity will be occur
>>>     in this
>>>     >>> way:
>>>     >>> the user will generate the file on my application and will put
>>>     this
>>>     >>> file
>>>     >>> into that another system. So, I need generate that file. Maybe
>>>       
>> one
>>     
>>>     >>> solution
>>>     >>> is to generate the file unzipped and determine that user
>>>     should zip
>>>     >>> the file
>>>     >>> with password on his Windows or Linux operating system. But, I
>>>     can't
>>>     >>> let
>>>     >>> that responsibility on user hands. So, because that I need to
>>>     generate
>>>     >>> the
>>>     >>> file already protected.
>>>     >>>
>>>     >> Perhaps you could use SCP (or SSH tunneling) to transfer the
>>>     file from
>>>     >> system to system, so that it need not ever be visible to the
>>>     outside
>>>     >> world, and thus not need the rather lame zip password.
>>>     >>
>>>     >> Another option would be to take the whole file and 2-way encrypt
>>>       
>> it
>>     
>>>     >> with a public/private key pair, and install the private key on
>>>       
>> the
>>     
>>>     >> receiving server.
>>>     >>
>>>     >> In other words, get out of the zip password rut, and protect
>>>     the file
>>>     >> some other way.
>>>     >>
>>>     >> --
>>>     >> Some people have a "gift" link here.
>>>     >> Know what I want?
>>>     >> I want you to buy a CD from some indie artist.
>>>     >> http://cdbaby.com/from/lynch
>>>     >> Yeah, I get a buck. So?
>>>     >>
>>>     >>
>>>     >>
>>>     >
>>>     >
>>>     Sounds like a creative challenge... this is what makes programmers
>>>     problem solvers. You can write the code, you have the knowledge..
>>>       
>> and
>>     
>>>     then you get requirements like this one. How annoying!
>>>
>>>     I found out some interesting information researching your issue. It
>>>     seems that encryption by password is actually not built in to ZIP
>>>     itself, but was an implementation detail apps like WinZip added to
>>>       
>> the
>>     
>>>     mix. Because of that, the original ZIP libs don't have any notions
>>>       
>> of
>>     
>>>     password protection.
>>>
>>>     It seems like this isn't a language specific issue, either.
>>>
>>>     I think it's time to get creative, Petros. You're in a bind, and I
>>>     assume you need to get this done, so you have the following
>>>     options (in
>>>     the order I would do it in..)
>>>      -> Turn on exec()
>>>      -> You can use/modify an app I wrote (in python) which accepts UDP
>>>     packets and executed commands based off of it. You can strip out the
>>>     really insecure things and just accept 'zip' commands. The lib/app
>>>       
>> is
>>     
>>>     really small and lightweight. There are no dependencies outside of I
>>>     think 3 python modules. If I couldn't turn on exec(), this is the
>>>     route
>>>     I would go.
>>>      -> Use some form of file/directory montoring + zip.
>>>      -> Pass the request on to an environment that has zip()
>>>
>>>     --
>>>     ==================
>>>     Nick Stinemates (nick@xxxxxxxxxxxxxx <mailto:nick@xxxxxxxxxxxxxx>)
>>>     http://nick.stinemates.org
>>>
>>>     AIM: Nick Stinemates
>>>     MSN: nickstinemates@xxxxxxxxxxx <mailto:nickstinemates@xxxxxxxxxxx>
>>>     Yahoo: nickstinemates@xxxxxxxxx <mailto:nickstinemates@xxxxxxxxx>
>>>     ==================
>>>
>>>
>>>
>>>       
>> What platform are you testing on?
>>
>> You got it to work under Linux but not on Windows? Am I understanding
>> that properly?
>>
>> For windows, I read you should be using a tool called PkZIP.
>>
>> --
>> ==================
>> Nick Stinemates (nick@xxxxxxxxxxxxxx)
>> http://nick.stinemates.org
>>
>> AIM: Nick Stinemates
>> MSN: nickstinemates@xxxxxxxxxxx
>> Yahoo: nickstinemates@xxxxxxxxx
>> ==================
>>
>>
>>
>>     
>
>   
Do you have SSH access to the system?

If so, 'man zip' and look at the params.

-- 
==================
Nick Stinemates (nick@xxxxxxxxxxxxxx)
http://nick.stinemates.org

AIM: Nick Stinemates
MSN: nickstinemates@xxxxxxxxxxx
Yahoo: nickstinemates@xxxxxxxxx
==================

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux