Re: Hiding the source!

Hello Bob, But what if you set up your stuff with only the following permissions: /cgi-bin directory: others with "x" only How can a browser have access to the PHP source if it is in a directory not allowing read access ? Can you explain how to disallow directory indexing? Thanks Claude. Bob Lutz wrote: > > You can place source that you want to protect in a directory outside of the HTML > path and link to it via an 'include' statement. This way, the source is not > available to users accessing the system via http (because it is outside the path > normally accessible to them) and after the script is processed, the source is > not visible. Also, if you do not allow directory indexing in your server > configuration, then a list of php files is not available to the casual http user > (unless you allow ftp or some other insecure access to your web path). > > Thanks, > Bob Lutz > > Ben Heuer wrote: > > > Hello, > > > > At the outset, I *love* PHP. I am new, but boy am I impressed with the sheer > > simplicity of the language! > > > > Now, that said, I'd like to ask the gurus in here some questions. My seniors > > tell me Java is the way to go because we can compile the code and hide the > > source. He claims that this is a big drawback of PHp + CGI type > > technologies. > > > > What do people usually say to counter these comments? What are the > > tips/tricks to hide code in PHP and CGI? Any kind of encryption/decryption > > at runtime? (Pls forgive me if this sounds stupid! ) > > > > Thanks a bunch in advance! > > Ben > > > > -- > > PHP General Mailing List (http://www.php.net/) > > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > > For additional commands, e-mail: php-general-help@lists.php.net > > To contact the list administrators, e-mail: php-list-admin@lists.php.net > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net