Re: php security on shared hosts
| From: | Jordi Canals | Date: | Mon, 27 Sep 2004 10:15:15 +0000 |
| Subject: | Re: php security on shared hosts | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-197941@lists.php.net to get a copy of this message | ||
On Mon, 27 Sep 2004 10:56:13 +0200, Marek Kilimajer <lists@kilimajer.net> wrote:
> raditha dissanayake wrote:
> > One aspect that we have not covered is using turck of zend to encode
> > your scripts. You cannot rule out such a script been reverse engineered
> > but it's still some measure of protection.
>
> I've never used encoder, so I might be way off.
>
> If he is able to use encoder, so are other users of the host. They can
> then load his encoded script and use print_r($GLOBALS) and
> print_r(get_defined_constants())
With some encoders, like Zend, you can encode the files so they can
run only with other scripts encoded by you. If you try to run a not
encoded script or encoded by other person, the files fail to run.
Regards,
Jordi.