Well, seeing how anyone with shell access can simply pico /home/myname/script.php on a shared serverI decided to search for a solution .. I read about php wrapping so I asked my provider if they allowed it, this was the response:
"Unfortunately because this is a shared hosting environment, enabling phpwrap could allow a hacker to potentionally access any file on our server if one of our customers were to write insecure code. Because we cannot trust that all of our users will use secure php scripts, wrappers are disabled by default (this is also the Cpanel default and we have to use what Cpanel uses). Changing the php configuration could also break other users scripts who are currently on the server.
There is a way around this though. You can chmod 640 scriptname "
Hmm ..that's what he says. However if I chmod the script 640, Its unusable through the web .. I get an error message ..
Other than shelling out $2k for zend encoder, is there absolutely nothing we can do to protect our scripts from other users? I cant have just every user be able to pico my scripts and grab all the passwords and what not ... is there no solution to my problem? Why do I get the feeling that most people don't even know that any user can pico their scripts when I talk to them? PLEASE HELP!!!!
