Re: PHP's vision
| From: | Ilia A. | Date: | Mon, 03 Jun 2002 17:00:15 +0000 |
| Subject: | Re: PHP's vision | ||
| References: | 1 2 3 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-84804@lists.php.net to get a copy of this message | ||
John,
If your authentication class holds the passwords inside wouldn't running the
'strings' utility on the file reveal all the passwords even if the php script
is Zend Encoded?
Ilia
On June 3, 2002 04:44 am, John Lim wrote:
> Hi Sebastian,
>
> Unfortunately some people are paranoid about security.
>
> We might not want people to fiddle around with the internals of a class,
> for example
> an authentication class which holds the passwords of users. Even if the
> whole web site
> is Zend Encoded, doing a var_dump on $GLOBALS will reveal a lot about .the
> site.
>
> Regards, John
>
> "Sebastian Bergmann" <sebastian@php.net> wrote in message
> news:3CFB1052.F0A09293@sebastian-bergmann.de...
>
> > John Lim wrote:
> > > Private members and methods are essential from a security view-point,
> >
> > Why? They solve social issues between developers.
> >
> > > and perhaps application variables, but that's about it.
> >
> > SRM adds Application Variables to the PHP Platform.
> >
> > --
> > Sebastian Bergmann
> > http://sebastian-bergmann.de/
> > http://phpOpenTracker.de/
> >
> > Did I help you? Consider a gift:
> > http://wishlist.sebastian-bergmann.de/