Re: PHP's vision
| From: | John Lim | Date: | Tue, 04 Jun 2002 16:33:51 +0000 |
| Subject: | Re: PHP's vision | ||
| References: | 1 2 3 4 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-84857@lists.php.net to get a copy of this message | ||
"Ilia A." <ilia@prohost.org> wrote in message
news:200206031300.15598.ilia@prohost.org...
> John,
>
> If your authentication class holds the passwords inside wouldn't running
the
> 'strings' utility on the file reveal all the passwords even if the php
script
> is Zend Encoded?
>
> Ilia
Hi Ilia,
Don't know, but it sure looks like encrypted mud. This isn't a.out you know.
Perhaps we should ask Zeev or Andi :-)
>
> On June 3, 2002 04:44 am, John Lim wrote:
> > Hi Sebastian,
> >
> > Unfortunately some people are paranoid about security.
> >
> > We might not want people to fiddle around with the internals of a class,
> > for example
> > an authentication class which holds the passwords of users. Even if the
> > whole web site
> > is Zend Encoded, doing a var_dump on $GLOBALS will reveal a lot about
.the
> > site.
> >
> > Regards, John
> >
> > "Sebastian Bergmann" <sebastian@php.net> wrote in message
> > news:3CFB1052.F0A09293@sebastian-bergmann.de...
> >
> > > John Lim wrote:
> > > > Private members and methods are essential from a security
view-point,
> > >
> > > Why? They solve social issues between developers.
> > >
> > > > and perhaps application variables, but that's about it.
> > >
> > > SRM adds Application Variables to the PHP Platform.
> > >
> > > --
> > > Sebastian Bergmann
> > > http://sebastian-bergmann.de/
http://phpOpenTracker.de/
> > >
> > > Did I help you? Consider a gift:
http://wishlist.sebastian-bergmann.de/
>