RE: [PHP4BETA] Byte-coding or protecting

It seems to me that the security of this is limited to non-existent. Running a php script without setuiding it in some way runs it under the apache account. Anything that apache can read, anyone can read. What if I wrote a little php script which did an fopen("your supposedly securet file", r)? I hope I am missing something really obvious here, otherwise this looks like the classic case of a lot of annoyance for the legitimate users, and no protection from those who do want to copy it away. Also known as a clueless admin. > -----Original Message----- > From: byg@fis.nsk.su [mailto:byg@fis.nsk.su] > Sent: Thursday, February 24, 2000 1:18 AM > To: Faisal Nasim > Cc: php4beta@lists.php.net > Subject: Re: [PHP4BETA] Byte-coding or protecting > > > Faisal Nasim wrote: > > > > Hi, > > > > Is there a nice way to byte-code, to protect > > the source code in shared environments etc? > > > > In Perl, thanks to its CGI nature, I made a cute program > > which did a nice hack so that the script contents > > go to /usr/bin/perl and the program itself would > > be a ELF binary! (group member thinks its a C > > script, and don't bother with it!) ;-) But that didn't > > allow POST on the script :( > > > > Any ideas? > We have the same problem and we have decided that it's a better to make > library > for critical points of a code. So, these pieces of a code form > "library". > This library you'd disposed away from developpers'groups, so the only > admin can > W/R and the only apache's pseudo-user (e.g. apache or web) could read > this. > a kind of the following: > in a file > ... > <? include "$LIB/somesmartlib.lib"; ?> > ... > ls -l should show: > > -rw-r----- 1 byg apache 1175 Jan 5 16:01 somesmartlib.lib > > > -- > > WBR, Yury Bokhoncovich, > SysAdmin at FIS. > > -- > PHP 4.0 Beta Mailing List <http://www.php.net/version4/> > To unsubscribe, e-mail: php4beta-unsubscribe@lists.php.net > For additional commands, e-mail: php4beta-help@lists.php.net > To contact the list administrators, e-mail: php4beta-admin@lists.php.net >