note 102250 added to security.hiding
| From: | Anonymous at osu1 dot php dot net | Date: | Fri, 04 Feb 2011 00:47:37 +0000 |
| Subject: | note 102250 added to security.hiding | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-176667@lists.php.net to get a copy of this message | ||
Thankyou all, there are some great examples. I took this one step further, and created I guess what
you could call the billion dollar program and fully utilizes the awsome power of ajax. I have server
side encrypter that pre-hashes all html, css, javascript and flash, prior to outputing to browser.
Used in conjuction with high-grade 4096bit cipher SSL3 it is unbreakable by any packet-sniffer, any
decoder, or any of method of parsing output. Works with all browsers, ie5+, firefox 1+, crome,
safari, opera. I havent tested on other less common browsers. Only drawback, is that a small amount
of client side code is used for the browser to properly render the page. Which means that the client
must have a javascript enabled browser or they would just get a blank page or predefined error
message. Also the client side code cannot be unobfuscated, decrypted, or read in any way by any
human, parser, script, or any other computer program.
Combined with the meathods mentioned here this makes for a truely secure server that is unhackable.
Not to mention that your html code, javascipt, php, css cannot be read or copied. As an added bounus
I also discovered that it prevents, mirroring, spoofing, session hijacking, spaming, id fraud, code
injection, and all other known and unknown attempts to break security. Also in my testing I found
that each time a page is loaded, displayed, or refresh a unique encryption algorithm, that can never
be reused is generated, if a vistor goes to view page source and copies the code to their local
server and tries to run it, it will not execute, therefor I can conclude that it is locked to a
specific server an cannot be executed by an external server.
----
Server IP: 69.147.83.197
Probable Submitter: 24.149.59.82
----
Manual Page -- http://www.php.net/manual/en/security.hiding.php
Edit -- https://master.php.net/note/edit/102250
Del: integrated -- https://master.php.net/note/delete/102250/integrated
Del: useless -- https://master.php.net/note/delete/102250/useless
Del: bad code -- https://master.php.net/note/delete/102250/bad+code
Del: spam -- https://master.php.net/note/delete/102250/spam
Del: non-english -- https://master.php.net/note/delete/102250/non-english
Del: in docs -- https://master.php.net/note/delete/102250/in+docs
Del: other reasons-- https://master.php.net/note/delete/102250
Reject -- https://master.php.net/note/reject/102250
Search -- https://master.php.net/manage/user-notes.php