sau/tissue

Slight variation of the original cleentfaar/tissue and evozon-php/tissue

1.0.1 2021-04-12 15:41 UTC

Requires

• php: >=7.1
• symfony/options-resolver: ^3.0 || ^4.0 || ^5.0
• symfony/process: ^2.5 || ^3.0 || ^4.0 || ^5.0

Requires (Dev)

• phpunit/phpunit: ^6.0

proprietary

• Cas Leentfaar
• Balazs Csaba
• Vladimir Mogilev

• security
• virus
• anti-virus
• clamav

README

A PHP library that scans your files for viruses. It does this by providing adapters for various virus-scanning software. Currently, the only adapter available is the ClamAvAdapter which, obviously, integrates the ClamAV scanner into your projects.

NOTE: If your project is built on top of the Symfony Framework, you are much better off using the TissueBundle that was specially made for it.

Documentation

• Installation
• Usage
• Contributing

Important

I highly recommend you to research the security issues involved before using any of these packages on a production server!

Although following the steps described in the documentation should be enough to keep most evil-doers from uploading infected files to your application, I can never give any 100% guarantee! You should take care in keeping your virus-scanner's signature database up-to-date, otherwise new viruses may get through. You should also keep in mind that there are many more ways to abuse uploads than just uploading an infected file!

Make sure your application cannot be manipulated to execute any of the uploaded files! Not even those deemed 'clean'!

For instance, if you were to keep files available on your web-directory after they have been uploaded, you better make sure that there is NO CHANCE that the file may get executed by your application in one way or another.

A malicious user could simply upload a piece of PHP-code (no virus!) that will open your application up to a huge range of leaks. Again, that's just one of the reasons that you should not solely rely on this package protecting your site!

Read up on this subject before opening up your application to possible security leaks! I am not responsible for any damage done to your server or application while using this package!

FAQ

Q: Why is there no adapter for [virusscanner here] yet?

A: I don't always have the time to make new stuff so if you would like to contribute adapters feel free to submit an issue or an PR for it! Take a look at the contributing guide for instructions, thanks!