What are the security threats of enabling php zip extension?

[Mugoma]

By default EasyApache doesn't compile with php zip extension.

But we have had several users asking for it.

Are there any risks of enabling php zip extension?

 

[cPanelMichael]

Hello,

You can find discussion of this topic on the following third-party URL:

What are the security threats of zip file uploads and what preventive actions should be taken?

Thank you.

 

[Mugoma]

I had already seen that link.

The link discusses about zip file uploads while my question is about 'PHP zip extension'. I am not conversant with the extension but don't think it has anything to do with uploading files.

 

[cPanelMichael]

Hello,

I'm not aware of any security issues with the PHP Zip extension itself. The security discussion would likely relate more-so the inclusion of malicious files in the zip archives that a PHP script would read. That said, we do provide a list of system administration service companies if you'd like specific security-related advice:

System Administration Services | cPanel Forums

Thanks!