Re: running php-gtk app securely - a suggestion

The embed SAPI shipped with PHP and bcompiler (in PECL) used to (and still should!) do the same job. ----- Original Message ----- From: "Sven Siwek" <sven.siwek@gmx.de> To: "kksou" <kksou@kksou.com> Cc: <php-gtk-general@lists.php.net> Sent: Friday, October 06, 2006 5:26 PM Subject: Re: [PHP-GTK] running php-gtk app securely - a suggestion

kksou schrieb:

A number of my friends have been very hesistant using php-gtk2 for 2 main reasons: 1) lack of a good compiler (hence protection of their codes) 2) (related to 1) distributing php-gtk applications While waiting for Roadsend who claims they will be coming out with php-gtk2 compiler soon, I'm been trying out various ways to resolve the above issues. Just wanted to "convince" my friends to join the php-gtk2 crowd... One method which I have thought of recently is as follows: 1) All php-gtk scripts are stored remotely on a server 2) Wrote a simple exe that is stored on client machine. Let's call this the launcher. 3) When user double-click the launcher, it will - create a temporary folder - download all php-scripts into the temp folder - start the php-gtk app - once the app starts, delete all php scripts and the folder The above make use of the fact that once the php scripts are loaded, the files are no longer needed and can be erased. Some notes: - The launcher can be written in VB, VC, Java or anything that can produce a exe. - User has no idea where the files are downloaded from - The exe launcher is extremely simple - just a couple of lines to download the file from remote server and save it on local machine. - The location of the temp folder can be random and anywhere you like - The moment the launcher detects that the php-gtk app is up and running, it deletes the temp folder and all the downloaded - If one is worried that user would "unerase" your files, there are many tools out there that can safely erase files away - The php scripts are not huge. So downloading time is not a concern. (Besides, this is only during start-up time.) One can even zip scripts on the server side, and unzip them on the client side before running the app. - Of course the above assumes a LAN or broadband environment I tried the above method. It's actually working. Before I demo this to my friends and get bombarded with questions, would appreciate any comments and suggestions from you. Do you think this is practical? Any potential issues you could foresee? Thanks and Regards, /kksou

Hi, I am right now in front of the same problem. A few minutes ago I got embeder working for me ( http://wildphp.free.fr/wiki/doku.php?id=win32std:embeder ) That nice little program puts all of your php-scripts inside an exe. You do start that exe like any other exe you have. I downloaded the source and php-bin and php-source and compiled the embeder (php 5.1.6) myself. The whole package php 5.1.6 with gtk2zeta and my application do work very happly together. Next step is using blenc to encrypt the sources... regards Sven -- PHP-GTK General Mailing List (http://gtk.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php