[RESOLVED] Security

slindstr

I was just wondering how secure PHP source files are. Is there a way for someone to somehow download my .php file (without using FTP or another similar method) and be able to see the source? If so is there a way to protect the code by encryption?

Thanks
Steve

bpat1434

Well, there are code obfuscators out there. And you can use the Zend encryption. There's also other third-party apps out there.

For the most part, via the web, you can't download the source. Unless someone discovers a security breach in your code that allows them in via an FTP (or how they can somehow download without having the server parse the file), then third-party apps would come in handy.

Generally: you don't need it. Your source is fairly hidden.

If you are writing an app that you will distribute (like WHMAutoPilot, vBulletin, etc.) where people will be able to see your code, a code obfuscator would work great.

You can google PHP Code Encryption on google and get some results:
SourceGuardian
PHP Code Lock
IonCube
Zend Optimizer

~Brett

justsomeone

So long as your server config isn't breached, a visitor can't download your php source.

Your PHP source will be visible to anyone who gains appropriate login access to your server. Obfuscators / Accelerators can get around this by only storing encrypted versions of the PHP code on the server, with the raw source remaining on your source control environment.