Re: encode php scripts with opcache compatibility
On Thu, 2014-05-22 at 16:54 +0200, Bas van Beek wrote:
> > Mind that a user could simply do something like this in an
> > auto_append_file to get all scripts:
> >
> > <?php
> > foreach (get_included_files() as $filename) {
> > $sourcecode[$filename] = file_get_contents($filename);
> > }
> > ?>
> >
> > So this ains little over using a phar file.
> Maybe I'm missing something but I don't see that happen if PHP is
> embedded in the C++ application through its own SAPI handler which will
> not pick up any ini directives from external php.ini files.
If you are not giving scripting access to the user so they can't execute
(well, they might attach a debugger and call zend_eval_string() etc.)
PHP code than this is ok. My response was mostly to Kevin, whom I
understood in a way as we was up to making this a general purpose
"source code hiding extension" for "normal" deployments.
johannes
Thread (32 messages)