On 03/25/2016 01:56 AM, David wrote:
Sorry, there is a mistake in previous email. The "ServerRoot" should be "DocumentRoot". My purpose: If the Apache can run the php file in memory, then it means that I can package the php files, then restore the php files in memory and run the php files. The end user will not see the php files, maybe it is a method to protect the php files. Somebody has suggested the zend tool, but the end user will will many php files, I think it is not good method. David
Sounds like you are trying to protect your source code. Or possibly hide the fact that you are using someone else's source code.
Zend use to have a way of encrypting php files, not sure if they still do.Simply generating them in memory won't be good enough because they can just be read from memory by the end user.
However it should be pointed out that many system administrators would never run php code on their server where they can not read the source code.
There's no way to audit the security of what it is doing if you can't read the source files. There also is no way to easily port it to a new version of php or fix minor bugs.
--------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|