Method extractZipArchive

src/FileRise/Domain/FileModel.php:1655–2806

* Extracts archive files from the specified folder. * Supports ZIP via ZipArchive and other formats via 7z (RAR extraction prefers unar when available). * * @param string $folder The folder from which archives will be extracted (e.g., "root" or a subfolder). * @param array $files An array of archive file names to extract. * @return array An associative array with keys "suc

($folder, $files)

     * @return array An associative array with keys "success" (boolean), and either "extractedFiles" (array) on success or "error" (string) on failure.
     */
    public static function extractZipArchive($folder, $files)
    {
        // Block ZIP extraction inside encrypted folders (v1).
        try {
            if (FolderCrypto::isEncryptedOrAncestor((string)$folder)) {
                return ["error" => "ZIP operations are disabled inside encrypted folders."];
            }
        } catch (\Throwable $e) {
/* ignore */
        }

        $errors = [];
        $warnings = [];
        $allSuccess = true;
        $extractedFiles = [];

        // Config toggles
        $SKIP_DOTFILES = defined('SKIP_DOTFILES_ON_EXTRACT') ? (bool)SKIP_DOTFILES_ON_EXTRACT : true;

        // Hard limits to mitigate zip-bombs (tweak via defines if you like)
        $MAX_UNZIP_BYTES = defined('MAX_UNZIP_BYTES') ? (int)MAX_UNZIP_BYTES : (200 * 1024 * 1024 * 1024); // 200 GiB
        $MAX_UNZIP_FILES = defined('MAX_UNZIP_FILES') ? (int)MAX_UNZIP_FILES : 20000;
        $formatBytes = function (int $bytes): string {
            $bytes = max(0, $bytes);
            $units = ['B', 'KB', 'MB', 'GB', 'TB', 'PB'];
            $value = (float)$bytes;
            $i = 0;
            while ($value >= 1024 && $i < count($units) - 1) {
                $value /= 1024;
                $i++;
            }
            $dec = ($value >= 10 || $i === 0) ? 0 : 1;
            return number_format($value, $dec) . ' ' . $units[$i];
        };

        $baseDir = realpath(self::uploadRoot());
        if ($baseDir === false) {
            return ["error" => "Uploads directory not configured correctly."];
        }

        // Build target dir
        if (strtolower(trim($folder) ?: '') === "root") {
            $relativePath = "";
            $folderNorm = "root";
        } else {
            $parts = explode('/', trim($folder, "/\\"));
            foreach ($parts as $part) {
                if ($part === '' || $part === '.' || $part === '..' || !preg_match(REGEX_FOLDER_NAME, $part)) {
                    return ["error" => "Invalid folder name."];
                }
            }
            $relativePath = implode(DIRECTORY_SEPARATOR, $parts) . DIRECTORY_SEPARATOR;
            $folderNorm   = implode('/', $parts); // normalized with forward slashes for metadata helpers
        }

        $folderPath = $baseDir . DIRECTORY_SEPARATOR . $relativePath;
        if (!is_dir($folderPath) && !mkdir($folderPath, 0775, true)) {
            return ["error" => "Folder not found and cannot be created."];