Re: Re: login with CVS accounts on docs.php.net
| From: | Jacques Marneweck | Date: | Fri, 11 Jun 2004 11:08:23 +0000 |
| Subject: | Re: Re: login with CVS accounts on docs.php.net | ||
| References: | 1 2 3 4 5 6 7 8 9 10 | Groups: | php.doc.web |
| Request: | Send a blank email to doc-web+get-45@lists.php.net to get a copy of this message | ||
On Fri Jun 11 11:58:08 2004 Derick Rethans wrote:
> On Fri, 11 Jun 2004, Mehdi Achour wrote:
>
> > We will provide sudo access to systems@.. and I don't think I'll publish
> > the list on my website :)
>
> That is not the problem, the problem is that other non-systems people
> can access the file.
>
> Derick
What if we were to arrange with Zend to provide us we a copy of their
Zend Encoder and use some encryption routines which can decode the password
file and extract the encrypted hash and check if the md5(secret . md5(crypt($pass)))
matches or something where we don't know the 'secret key' set by systems
and we cannot view the source for this php script. One requirement would be
that we would need to run zend optimizer ont he docs webserver.
Regards
--jm