Re: Local variable protection

From: Date: Wed, 12 Oct 2011 20:24:15 +0000
Subject: Re: Local variable protection
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-315256@lists.php.net to get a copy of this message
Quoting Benjamin Coddington <bcodding@uvm.edu>:
Are there any assurances that function local variables are protected from code calling the function? For example, I would like to provide some cryptographic functions such as function org_secure_string($string) { $org_key = "a very random key"; return hash($string, $key); } function org_reveal_string($hash) { $org_key = "a very random key"; return unhash($hash, $key); } I'd like to protect $org_key from any code following or using these functions. I've not yet found a way that it can be revealed, but I wonder if anyone here can give me a definitive answer whether or not it is possible.
It's called the scope of the variable. See http://us3.php.net/manual/en/language.variables.scope.php Variables defined in a function are only available to the function where they are defined. Ken

« previous php.general (#315256) next »