A website of mine receives updates from the client in a zip file. I can open and process this fine but they are now insisting that the file is password protected, which is a bit of a problem. I can do something like the following:
echo shell_exec('unzip -P password file.zip');
but as the server is running IIS this throws up a permissions error. Apparently we need to "give the Internet Guest Account (a.k.a. IUSR_MachineName or simply IUSR) read and execute permission to the command shell program, cmd.exe."
So, two questions:
- Are there any third-party apps/plugins/etc that will allow me to unzip password protected files? (I'm running PHP5 on a Windows server)
- What are the security risks in giving read and execute permissions to cmd.exe?
Any help would be gratefully received!