Seems to me the truth is there is really no way to do this. Since an admin can take 
ownership any time he wants, and world read would allow anyone to view the source 
which is part of the problem. I've always thought that scripting languages should 
allow for source code encryption and have the parser program able to decrypt it based 
on a seed. No encryption is fool proof but it would be a step to protecting our 
intellectual property as coders. Compiled applications have this advantage already 
because once compiled to decompile it is an ugly process.

In one case, in an ethically questionable situation, I chose to keep the applications 
"guts" on my own server, and had the customer's server request the page from my server 
using PHP's file() function. Checked things like requestor domain and such to validate 
the source of the request. It worked quite well, but added a point of failure to the 
system. It turned out I was correct to be concerned, the customer decided to not pay 
for it, and attempted to move the code to a production machine at which point it 
simply stopped working. :-) All they had was a few php files of only a few lines each.

<>< Ryan

-----Original Message-----
From: Adam Williams [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 29, 2002 1:06 PM
To: Ryan Jameson (USA)
Cc: [EMAIL PROTECTED]
Subject: RE: [PHP-DB] how to hide source code??


oh yeah duh me, set it 701

                        Adam

On Thu, 29 Aug 2002, Ryan Jameson (USA) wrote:

> Wouldn't that make php unable to read it as well? Then it is useless as well.
> <>< Ryan
>
> -----Original Message-----
> From: Adam Williams [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, August 29, 2002 1:00 PM
> To: Smita Manohar
> Cc: [EMAIL PROTECTED]
> Subject: Re: [PHP-DB] how to hide source code??
>
>
> set you to owner of the script and then chmod 700 it
>
>                       Adam
>
> On Thu, 29 Aug 2002, Smita Manohar wrote:
>
> > hii
> > im using php script with mysql. i want to hide the script from the admin or
> > from the person who has privileges to access all the data. bcos i use ftp to
> > upload the files. and i don't want anyone should be able to view the source.
> >
> > is it possible to do so?
> >
> > thnx and regds,
> > smita.
> >
> >
> >
> > _________________________________________________________________
> > Send and receive Hotmail on your mobile device: http://mobile.msn.com
> >
> >
> >
>
>
>


--
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to