What is an obfuscator? Are there ones for just regular CF? Robert Everland III Web Developer Extraordinaire Dixon Ticonderoga Company http://www.dixonusa.com
-----Original Message----- From: Dave Watts [mailto:[EMAIL PROTECTED]] Sent: Wednesday, September 11, 2002 3:20 AM To: CF-Talk Subject: RE: Tool that uses cfusion_encrypt? > I need a tool to encrypt a website, as strongly as possable, > but leaving the files in working condition. I've found a few, > but none use the little known function cfusion_encrypt; Hoping > that somone else has written an app for this. If not, I guess > I'll have to do so. I'm not sure exactly what you mean by "encrypt [a] website". If you mean, encrypt the .cfm source so that someone on the server console can't read it, you're pretty much stuck with the CFENCODE.EXE program, which isn't very secure since there are well-known decryptors. If you absolutely must hide your source code from people who have console access to the server, the only practical alternative I can suggest is to place the critical portions in external components - COM objects (not really recommended with CF MX, though) or Java classes. There are Java decompilers, of course, but there are also Java obfuscators, which may deter most people. If your concern is something other than people with console access being able to read your source code, there are many other approaches you can take - the appropriate use of permissions to minimize the likelihood of source code browsing exploits, for example. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ voice: (202) 797-5496 fax: (202) 797-5444 ______________________________________________________________________ Get the mailserver that powers this list at http://www.coolfusion.com FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
