Re: [PHP-DB] Code Security

2015-02-05 Thread Felicia Case
Hi Ethan, If the user is to neither write nor use the code then why do they have access in the first place? Just wondering. F > On Feb 5, 2015, at 8:24 PM, Ethan Rosenberg > wrote: > >> On 02/05/2015 11:04 AM, Bastien Koert wrote: >> I'm with the two Richard's on this, those users shoul

Re: [PHP-DB] Code Security

2015-02-05 Thread Ethan Rosenberg
On 02/05/2015 11:04 AM, Bastien Koert wrote: I'm with the two Richard's on this, those users shouldn't have telnet access to the host server at all. Users should be using the browser to access your site. Other than that, the most important thing you can do is to regularly back up your code and d

Re: [PHP-DB] Code Security

2015-02-05 Thread Bastien Koert
I'm with the two Richard's on this, those users shouldn't have telnet access to the host server at all. Users should be using the browser to access your site. Other than that, the most important thing you can do is to regularly back up your code and database to another location so that if somethin

Re: [PHP-DB] Code Security

2015-02-05 Thread Omar Muhsin
You forgot this one "keep the box OFFLINE ... best security" :-D On 05-02-15 14:10, Richard Quadling wrote: 1 - Don't allow terminal access to your box. 2 - Use a PHP byte code encoder (IonCube, Zend Guard) - not perfect as they can be reversed to access the code in a form. 3 - Don't use PHP.

Re: [PHP-DB] Code Security

2015-02-05 Thread Richard
Original Message > Date: Thursday, February 05, 2015 13:10:51 + > From: Richard Quadling > To: E Rosenberg > Cc: PHP Database List > Subject: Re: [PHP-DB] Code Security > > On 5 February 2015 at 05:52, Ethan Rosenberg < > erosenb...@hygeiabiomedical.com> wrote: >>

Re: [PHP-DB] Code Security

2015-02-05 Thread Richard Quadling
On 5 February 2015 at 05:52, Ethan Rosenberg < erosenb...@hygeiabiomedical.com> wrote: > > How do I prevent someone from opening a terminal window, going to /var/www > and stealing all my code? > 1 - Don't allow terminal access to your box. 2 - Use a PHP byte code encoder (IonCube, Zend Guard) - n