RE: [PHP] Compiled Source for PHP?

From: Date: Sun, 17 Dec 2000 22:06:10 +0000
Subject: RE: [PHP] Compiled Source for PHP?
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-30780@lists.php.net to get a copy of this message
How is this different from disassembling executables? You will *NEVER* have security as long as the complete program resides on your client's machines. It it only relative. "Just unobfuscating" php code will need a skilled php coder to understand the output, as you can bet it will be one terrible mess and totally undocumented. Just as you need a skilled assember programmer to understand dissassembled executables. Look at it this way - if you have clients that dissassemble / unobfuscate your code AND understand the output then they are sure as hell smart enough to make what you've tried to hide from them in the first place. Also, a skilled programmer will only need to look at your program's blackbox behaviour to make something similar. So, give up. Run the obfuscator and hide it from the masses, that's what you want in the first place anyway. Live with the fact that the skilled people out there could, theoretically, break the obfuscation and read your bytecode. -Sander > -----Original Message----- > From: Ignacio Vazquez-Abrams [mailto:ignacio@openservices.net] > Sent: 17 December 2000 22:36 > To: Joe Stump > Cc: Toby Butzon; php-general@lists.php.net > Subject: Re: [PHP] Compiled Source for PHP? > > > IIRC, what it will do is work with precompiled Zend bytecode and > then parse > that when the page is requested. Writing a decompiler wouldn't be terribly > difficult, so there's probably not that much security, even if encrypted. > > On Sun, 17 Dec 2000, Joe Stump wrote: > > > I'll believe it when I see it - and according to Rasmus it's > only going to be > > an obfusicator (or however you spell it) which means if you > have it on your > > machine you can jsut unobfusicate it. > > > > --Joe > > > > On Sun, Dec 17, 2000 at 04:30:07PM -0500, Toby Butzon wrote: > > > Zend's Encoder is coming out in January I believe. > > > > > > www.zend.com > > > > > > Toby Butzon > > > [ criticism spurs improvement ] > > > > > > > > > ----- Original Message ----- > > > From: "Joe Stump" <joe@earth.care2.com> > > > To: "Randy Katz" <randyk@ccsales.com> > > > Cc: <php-general@lists.php.net> > > > Sent: Sunday, December 17, 2000 4:25 PM > > > Subject: Re: [PHP] Compiled Source for PHP? > > > > > > > > > : No can do. > > > : > > > : --Joe > > > : > > > : On Sun, Dec 17, 2000 at 01:23:51PM -0800, Randy Katz wrote: > > > : > Hi, > > > : > > > > : > Does anyone know if PHP source files can be compiled or > encrypted so > > > that > > > : > they can only be read by the web server? > > > : > > > > : > Thank you, > > > : > Randy Katz > > > : > > > > : > > > > : > -- > > > : > PHP General Mailing List (http://www.php.net/) > > > : > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > > > : > For additional commands, e-mail: php-general-help@lists.php.net > > > : > To contact the list administrators, e-mail: > php-list-admin@lists.php.net > > > : > > > : --- > > > : Joe Stump > > > : PHP Programmer > > > : www.Care2.com > > > : > > > : > > > : -- > > > : PHP General Mailing List (http://www.php.net/) > > > : To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > > > : For additional commands, e-mail: php-general-help@lists.php.net > > > : To contact the list administrators, e-mail: > php-list-admin@lists.php.net > > > : > > > : > > > > > > > --- > > Joe Stump > > PHP Programmer > > www.Care2.com > > > > > > > > -- > Ignacio Vazquez-Abrams <ignacio@openservices.net> > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net > >

« previous php.general (#30780) next »