Re: PHP's vision

From: Date: Mon, 03 Jun 2002 17:00:15 +0000
Subject: Re: PHP's vision
References: 1 2 3  Groups: php.dev 
Request: Send a blank email to php-dev+get-84804@lists.php.net to get a copy of this message
John, If your authentication class holds the passwords inside wouldn't running the 'strings' utility on the file reveal all the passwords even if the php script is Zend Encoded? Ilia On June 3, 2002 04:44 am, John Lim wrote: > Hi Sebastian, > > Unfortunately some people are paranoid about security. > > We might not want people to fiddle around with the internals of a class, > for example > an authentication class which holds the passwords of users. Even if the > whole web site > is Zend Encoded, doing a var_dump on $GLOBALS will reveal a lot about .the > site. > > Regards, John > > "Sebastian Bergmann" <sebastian@php.net> wrote in message > news:3CFB1052.F0A09293@sebastian-bergmann.de... > > > John Lim wrote: > > > Private members and methods are essential from a security view-point, > > > > Why? They solve social issues between developers. > > > > > and perhaps application variables, but that's about it. > > > > SRM adds Application Variables to the PHP Platform. > > > > -- > > Sebastian Bergmann > > http://sebastian-bergmann.de/ > > http://phpOpenTracker.de/ > > > > Did I help you? Consider a gift: > > http://wishlist.sebastian-bergmann.de/

« previous php.dev (#84804) next »