note 102250 deleted from security.hiding by danbrown
| From: | danbrown@php.net | Date: | Fri, 04 Feb 2011 00:51:57 +0000 |
| Subject: | note 102250 deleted from security.hiding by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-176668@lists.php.net to get a copy of this message | ||
Note Submitter: Anonymous
----
Thankyou all, there are some great examples. I took this one step further, and created I guess what
you could call the billion dollar program and fully utilizes the awsome power of ajax. I have server
side encrypter that pre-hashes all html, css, javascript and flash, prior to outputing to browser.
Used in conjuction with high-grade 4096bit cipher SSL3 it is unbreakable by any packet-sniffer, any
decoder, or any of method of parsing output. Works with all browsers, ie5+, firefox 1+, crome,
safari, opera. I havent tested on other less common browsers. Only drawback, is that a small amount
of client side code is used for the browser to properly render the page. Which means that the client
must have a javascript enabled browser or they would just get a blank page or predefined error
message. Also the client side code cannot be unobfuscated, decrypted, or read in any way by any
human, parser, script, or any other computer program.
Combined with the meathods mentioned here this makes for a truely secure server that is unhackable.
Not to mention that your html code, javascipt, php, css cannot be read or copied. As an added bounus
I also discovered that it prevents, mirroring, spoofing, session hijacking, spaming, id fraud, code
injection, and all other known and unknown attempts to break security. Also in my testing I found
that each time a page is loaded, displayed, or refresh a unique encryption algorithm, that can never
be reused is generated, if a vistor goes to view page source and copies the code to their local
server and tries to run it, it will not execute, therefor I can conclude that it is locked to a
specific server an cannot be executed by an external server.