Method logVirusDetection

src/FileRise/Domain/UploadModel.php:1689–1757

* Append a virus detection record to META_DIR/virus_detections.log (JSONL). * * @param string $path The scanned file path on disk. * @param string $rawMessage Raw clamscan output (stdout/stderr combined). * @param array $context Extra context: folder, file, user, ip, source, etc. * @param string $cmd Command used (clamscan / custom). * @param int $

(
        string $path,
        string $rawMessage,
        array $context,
        string $cmd,
        int $exitCode
    )

     * @param int    $exitCode   ClamAV exit code.
     */
    private static function logVirusDetection(
        string $path,
        string $rawMessage,
        array $context,
        string $cmd,
        int $exitCode
    ): void {
        try {
            $baseMeta = rtrim(self::metaRoot(), '/\\') . DIRECTORY_SEPARATOR;
            if (!is_dir($baseMeta)) {
                @mkdir($baseMeta, 0775, true);
            }

            $user   = $context['user']   ?? ($_SESSION['username'] ?? 'Unknown');
            $ip     = $context['ip']     ?? self::getClientIp();
            $source = $context['source'] ?? 'normal';

            // Folder + file in log – prefer context, fallback to path
            $fileName = $context['file'] ?? basename($path);
            $folder   = $context['folder'] ?? null;

            if ($folder === null) {
                // Best-effort: derive folder relative to upload root
                $rootDir = rtrim(self::uploadRoot(), '/\\') . DIRECTORY_SEPARATOR;
                if (strpos($path, $rootDir) === 0) {
                    $rel     = substr($path, strlen($rootDir));
                    $rel     = str_replace(DIRECTORY_SEPARATOR, '/', $rel);
                    $pos     = strrpos($rel, '/');
                    $folder  = ($pos !== false) ? substr($rel, 0, $pos) : '';
                } else {
                    $folder = '';
                }
            }

            $msg = self::truncateLogMessage($rawMessage, 400);

            $record = [
                'ts'       => gmdate('c'),
                'user'     => $user,
                'ip'       => $ip,
                'folder'   => ($folder === '' ? 'root' : $folder),
                'file'     => $fileName,
                'source'   => $source,
                'engine'   => $cmd,
                'exitCode' => $exitCode,
                'message'  => $msg,
            ];

            $json = json_encode($record, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
            if ($json === false) {
                return;
            }

            // *** Canonical base path: matches virusLog.php ***
            $logFile  = $baseMeta . 'virus_detections.log';

            // Soft rotation
            if (file_exists($logFile) && filesize($logFile) > self::VIRUS_LOG_MAX_BYTES) {