Re: PHP's vision

From: Date: Tue, 04 Jun 2002 16:33:51 +0000
Subject: Re: PHP's vision
References: 1 2 3 4  Groups: php.dev 
Request: Send a blank email to php-dev+get-84857@lists.php.net to get a copy of this message
"Ilia A." <ilia@prohost.org> wrote in message news:200206031300.15598.ilia@prohost.org... > John, > > If your authentication class holds the passwords inside wouldn't running the > 'strings' utility on the file reveal all the passwords even if the php script > is Zend Encoded? > > Ilia Hi Ilia, Don't know, but it sure looks like encrypted mud. This isn't a.out you know. Perhaps we should ask Zeev or Andi :-) > > On June 3, 2002 04:44 am, John Lim wrote: > > Hi Sebastian, > > > > Unfortunately some people are paranoid about security. > > > > We might not want people to fiddle around with the internals of a class, > > for example > > an authentication class which holds the passwords of users. Even if the > > whole web site > > is Zend Encoded, doing a var_dump on $GLOBALS will reveal a lot about .the > > site. > > > > Regards, John > > > > "Sebastian Bergmann" <sebastian@php.net> wrote in message > > news:3CFB1052.F0A09293@sebastian-bergmann.de... > > > > > John Lim wrote: > > > > Private members and methods are essential from a security view-point, > > > > > > Why? They solve social issues between developers. > > > > > > > and perhaps application variables, but that's about it. > > > > > > SRM adds Application Variables to the PHP Platform. > > > > > > -- > > > Sebastian Bergmann > > > http://sebastian-bergmann.de/ http://phpOpenTracker.de/ > > > > > > Did I help you? Consider a gift: http://wishlist.sebastian-bergmann.de/ >

« previous php.dev (#84857) next »