note 66101 deleted from function.eval by danbrown
| From: | danbrown@php.net | Date: | Sun, 17 May 2009 19:56:13 +0000 |
| Subject: | note 66101 deleted from function.eval by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-155296@lists.php.net to get a copy of this message | ||
Note Submitter: aoeuid at gmail dot com
----
Just as a reply to 'evildictaitor', eval() obfuscation can be of use use against script
kiddies, or people with little free time if implemented more intelligently.
And by more intelligently I mean more randomly, do perhaps a hundred iterations and randomly choose
the obfuscation method every iteration. Doing rot13 with base64 once, then something from Mcrypt()
and so on. Might take its toll on performance, but atleast isn't _that_ easily solved by
eval->print :)
Of course, obfuscation isn't really a way to securing your code, but might work if one's
in a hurry and doesn't have anything else better.