Language: PHP
Label: vulnerable
CWE: CWE-77 \u2014 Improper Neutralization of Special Elements used in a Command ('Command Injection')
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

Code:
	private function fileGetZipContentCheck($path){
		if(!request_url_safe($path)) return;
		$urlInfo = parse_url_query($path);
		if(!isset($urlInfo['index']) || !isset($urlInfo['path']) || !isset($urlInfo['accessToken'])) return;
		if(!Action('user.index')->accessTokenCheck($urlInfo['accessToken'])){return;}
		
		$zipFile  = rawurldecode($urlInfo['path']);
		$indexArr = @json_decode(rawurldecode($urlInfo['index']),true);
		if(!$indexArr || !$zipFile){show_json(LNG('common.pathNotExists'),false);}
		
		$isShareFile = isset($urlInfo['explorer/share/unzipList']);
		$isViewFile  = isset($urlInfo['explorer/index/unzipList']);
		// 权限判断;
		if($isShareFile){
			$shareFileInfo = Action("explorer.share")->sharePathInfo($zipFile);
			if(!$shareFileInfo){show_json(LNG('explorer.noPermissionAction'),false);}
			$zipFile = $shareFileInfo['path'];
		}else if($isViewFile){
			if(!Action('explorer.auth')->canRead($zipFile)){
				show_json(LNG('explorer.noPermissionAction'),false);
			}
		}else{return;}
		
		// 解压处理;
		$filePart  = IOArchive::unzipPart($zipFile,$indexArr);
		if(!$filePart || !IO::exist($filePart['file'])){
			show_json(LNG('common.pathNotExists'),false);
		}
		$this->fileGetMake($filePart['file'],IO::info($filePart['file']),$path);exit;
	}