Extract only specific extensions from a ZIP

Use the library Extractor , which extracts compressed files and returns a% object of the Finder package, documentation < a href="http://symfony.com/doc/current/components/finder.html"> here .

See the example for your situation:

$temporaryDirectory = new Mmoreram\Extractor\Filesystem\TemporaryDirectory();
$extensionResolver = new Mmoreram\Extractor\Resolver\ExtensionResolver;
$extractor = new Mmoreram\Extractor\Extractor($temporaryDirectory, $extensionResolver);

$finder = $extractor->extractFromFile($uploadFile);

$validMimes = ["image/png", "image/jpg"];

$filter = function(\SplFileInfo $path) {
    $file = new File($path);

    if (in_array($file->getMimeType(), $validMimes)) {
        return true;
    }
};

$validFiles = $finder->files()->filter($filter);

Based on the advice given by @RodigoRigotti, I wrote a code to exclude unwanted extension files. The extraction is done to a secure folder, not to give the user direct access to the folder (thus avoiding a PHP injection).

 public function postAjaxUploadZip($id) {   
        $file = Input::file('zip');

        $rules = [
            'zip' => 'required|mimes:zip'
        ];

        $messages = [
            'mimes' => "Extensão de arquivo inválida"
        ];

        $validation = Validator::make(Input::all(), $rules, $messages);


        if ($validation->passes()) {

            try{

                $zip = $file->getRealPath();

                $zipObject =  new ZipArchive;
                if (! $zipObject->open($zip)) {

                    throw new RunTimeException('Não foi possível abrir o arquivo enviado');
                }

                $path = base_path("secure/{$id}");  

                if (! File::isDirectory($path)) {

                    File::makeDirectory($path, 0755);
                }

                // Extrai para uma pasta segura, para o usuário não ter acesso a esses arquivos pelo pasta "public" do Laravel
                $zipObject->extractTo($path);

                // Itera com os arquivos do diretório onde houve a extração

                $files = new FileSystemIterator($path);

                foreach ($files as $file) {

                   $data = [
                      'file' => $file->getRealPath()
                   ];

                   $rules = ['file' => 'mimes:jpg,png,bmp,jpeg'];

                   if (Validator::make($data, $rules)->fails()) {

                      $deletedFiles[] = $file->getFilename();

                   }

                }   

                File::delete($filesToDelete);


            } catch (Exception $e) {

                return Response::json([
                    'error'     => $e->getMessage(),
                    'directory' => $path,
                ]);
            }


            return Response::json([
                'error' => false, 
                'deletedFiles' => $filesToDelete
            ]);

        } else {

            return Response::json(['error' => $validation->messages()]);    
        }
    }

If someone has a better idea, it will be a great help. The less code the better!