Preventing fwrite

plankt

Is it possible to prevent the fwrite of a variable by adding something in the variable or by other means? I have no access to chmod, the php ini or anything except my script.

The variable contains encrypted PHP code to be used with 'eval' but with fwrite the string gets exposed which is why I want to prevent that.

dagon

Think your confusing terms, as this makes no sense, fwrite() is a php function. Can you rephrase what it is you want.

bradgrafelman

No, it's not possible to get a server to intercept all data written out to disk by PHP and accept or reject the write based on what data it holds unless you wanted to write some sort of driver or resident service/program to scan every file written to.

Why are you trying to do this? If a simple fwrite command will expose your so-called "encrypted" code, then you may want to rethink your use of the word "encrypted" (e.g. perhaps "obfuscated" at best will work... probably just more like "hidden").

plankt

I wrote that 4 am so it might have been a bit confusing, here's the idea:

I have a project fully made in PHP which I want to distribute. I want to prevent users from sharing with eachother by making every copy unique and be bound to the domain of their choice.

Now as long as you know PHP you can just alter the code inside the projects and remove the security checks etc..

I've looked at encrypting part of the code to prevent that from happening but I hesitated from using a program when I read this:
http://answers.yahoo.com/question/index?qid=20080716074827AAd2bcD
And I also want it to be automatically encrypted by a PHP script and work on all PHP5 installations.

Now I was just messing around and found that if the string looks like this:

/*_<?php*/ <PHP CODE HERE> /*?>*/

The eval function will execute the code while the echo, print, fprint and so on functions will just print a smiley like this /_/ (yeah, I added underscore to make it a smiley ^⁾

I then noticed that if you write the code to a file, it didn't read the comment etc at all and just printed the whole code.

Thanks in advance for the help and sorry if I was a bit confusing.

dagon

licence it or use something like zendgard the eval - method is useless, people post here every week about how they can break the eval'ed section.

bradgrafelman

As I pointed out earlier, what you're doing isn't what I would call "encrypting" but rather "obfuscating" or just plain "hiding" your PHP source code. Industry standard encrypting would be done with commercial products such as Zendgard, as dagon mentioned.