473,890 Members | 1,360 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Encrypting PHP Code

Hello all. Anyone know of a free program I can use
to encrypt my php code? I would like it to be secure as possible.
i.e. not viewable from the web.

Also, is there an html encryptor or will the php encryptor
encrypt that, too?

Thanks,
David
--
David Williams
Georgia Institute of Technology, Atlanta Georgia, 30332
Email: dw***@prism.gat ech.edu
Jul 17 '05 #1
14 7420
David Williams wrote:
Hello all. Anyone know of a free program I can use
to encrypt my php code? I would like it to be secure as possible.
i.e. not viewable from the web.

Also, is there an html encryptor or will the php encryptor
encrypt that, too?


Free: http://turck-mmcache.sourceforge.net/

More Portable (cost money):
http://www.zend.com/store/products/zend-encoder.php (start @ US$960)
http://www.sourceguardian.com/ (start @ US$250)
http://www.ioncube.com/sa_encoder.php (start @ US$199)
http://www.sourcecop.com/ (only US$10)

Most portable (not encoders - distributes source in a difficult-to-read
way):
http://www.gridinsoft.com/protect.php
http://www.semdesigns.com/Products/O...bfuscator.html

I evaluated a few of the different *encoders* above. I liked turck, but
found that the ISPs I worked with didn't want to build and install the
necessary module.

Zend encoder was simply out of my price range, so I didn't even download
that one.

SourceGuardian looked good, but I had seen some things online about the
possibility of decoding files. (The techs at SG assured me that the info
I found was only valid for previous versions with non-default settings
that users shouldn't have used any way.)

I hadn't seen SourceCop before I decided on an encoder, so I didn't try
that out either.

ionCube is the one I went with. I ended up getting the Pro encoder and
the Pro GUI to go with it (don't remember what it all cost in the end),
and I have been very happy with the results thus far. I have been using
it steadily for about 3 months now, but haven't had any server
compatibility problems yet.

As for HTML, there is no way to encrypt HTML in a way that a web visitor
can't retrieve it rather quickly (most cases in less than 10 minutes).
HTML is what the browser needs to display the content, so without that,
you're SOL. There are javascript tools that claim to encrypt, but if the
visitor doesn't have js enabled, they get nothing worthwhile (read
"can't read your page at all"). Also, in order encrypt, they have to
have a decrypt function since you can't use byte-code with JS (ASAIK).
Besides, if you do something that you think is spectacular in HTML,
chances are you aren't the first to do it (by a long shot).

--
Justin Koivisto - ju****@koivi.co m
http://koivi.com
Jul 17 '05 #2
I noticed that Message-ID: <d3**********@n ews-int.gatech.edu> from David
Williams contained the following:
Hello all. Anyone know of a free program I can use
to encrypt my php code? I would like it to be secure as possible.
i.e. not viewable from the web.


Your php code is not viewable via the web anyway.

--
Geoff Berrow (put thecat out to email)
It's only Usenet, no one dies.
My opinions, not the committee's, mine.
Simple RFDs http://www.ckdog.co.uk/rfdmaker/
Jul 17 '05 #3

"David Williams" <dw***@prism.ga tech.edu> wrote in message
news:d3******** **@news-int.gatech.edu. ..
Hello all. Anyone know of a free program I can use
to encrypt my php code? I would like it to be secure as possible.
i.e. not viewable from the web.
PHP code is never viewable from the web, only the output it produces.
Also, is there an html encryptor or will the php encryptor
encrypt that, too?


It is not possible to encrypt HTML otherwise browsers would not be able to
display it.

--
Tony Marston

http://www.tonymarston.net


Jul 17 '05 #4
Hi,
I am using php 4.3.3 and has complied
mmcache.dll and TurckLoader.dll and added
this line to php.ini
--------------------
;Turck MMCache
zend_extension_ ts="C:\PHP\exte nsions\mmcache. dll"
mmcache.shm_siz e="16"
mmcache.cache_d ir="c:\mmcache "
mmcache.enable= "1"
mmcache.optimiz er="1"
mmcache.check_m time="1"
mmcache.debug=" 0"
mmcache.filter= ""
mmcache.shm_max ="0"
mmcache.shm_ttl ="0"
mmcache.shm_pru ne_period="0"
mmcache.shm_onl y="0"
mmcache.compres s="1"
----------------------
I want to know how I can encode &decode my php files .
Plz give the steps . Thanks .

Jul 17 '05 #5
try roadsend compiler.. it produces native machine code and not byte
code. so it's believed to be faster and more secure.. They have a free
21 day trial.

Mike

Jul 17 '05 #6
Actually, PHP code can be viewed from the web...if the PHP compilier
breaks down.
Of course, using an os technology, I would encourage you to give your
source away, but as others mentions, there are encoding technologies
avaliable.

As for HTML, there are javascript obfuscators, but nothing that is
highly secure.

Jul 17 '05 #7
>Actually, PHP code can be viewed from the web...if the PHP compilier
breaks down.
This can happen briefly while you are upgrading PHP versions (if
the web server is left up while doing it), or if you accidentally
turn off PHP (upgrades have been known to install sample config
files over live ones, and no, I'm not blaming the stock PHP or Apache
distributions for this, it tends to be ports, packages, or rpms that
do this), or the PHP plug-in happens to have a bad disk sector in
it and it won't load.
Of course, using an os technology, I would encourage you to give your
source away, but as others mentions, there are encoding technologies
avaliable.


I do not encourage "open-source" passwords to online databases, PGP
keys, cert secret keys, social security numbers, or credit card
numbers, especially if the owner doesn't realize this.

I generally prefer to put such sensitive data (database access info;
code generally isn't an issue) in include files OUTSIDE the document
tree but in the PHP include path. If PHP breaks, the web server
won't serve such files. If PHP is working, you won't see the PHP
code including the passwords.

Another advantage is that I can change the database being used
easily, knowing that info is kept in only one place, and I can give
away the PHP code with much less risk that I accidentally give away
sensitive passwords.
As for HTML, there are javascript obfuscators, but nothing that is

highly secure.


Javascript is Turned Off(tm).

Gordon L. Burditt

Jul 17 '05 #8
Is there any free soft that can produce machine code for php ?
If I encode my script with turck-mmcache how one can decode it ?
Is it possible ?
Thanks .

Jul 17 '05 #9

"Justin Koivisto" <ju****@koivi.c om> wrote in message
news:yY******** ********@news7. onvoy.net...
David Williams wrote:
Hello all. Anyone know of a free program I can use
to encrypt my php code? I would like it to be secure as possible.
i.e. not viewable from the web.

Also, is there an html encryptor or will the php encryptor
encrypt that, too?


[Encoders:]
Free: http://turck-mmcache.sourceforge.net/
More Portable (cost money):
http://www.zend.com/store/products/zend-encoder.php (start @ US$960)
[others... snip]
Most portable (not encoders - distributes source in a difficult-to-read
way):
http://www.semdesigns.com/Products/O...bfuscator.html ($150)

I evaluated a few of the different *encoders* above. I liked turck, but
found that the ISPs I worked with didn't want to build and install the
necessary module.


This is the standard complaint about encoders; they require something
in the customer's PHP server to implement decoding,
which the customers very reasonably don't want want to configure and manage.

Source code obfuscators (such ours, the SD one listed above) require
*no* change to the customer's web server. Ours works with PHP4
and PHP5.

We offer another Obfuscator, to handle obfuscating the JavaScript code
in your pages, if you need that too.
--
Ira D. Baxter, Ph.D., CTO 512-250-1018
Semantic Designs, Inc. www.semdesigns.com
Jul 17 '05 #10

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

7
2032
by: steve | last post by:
Hi, I know there are a few free and paid php source code encryption scripts around. Has anyone used one, and any feedback? I am interested in encrypting source that is placed on a remote host. -- Posted using the http://www.dbForumz.com/ interface, at author's request Articles individually checked for conformance to usenet standards Topic URL: http://www.dbForumz.com/PHP-Obfuscating-Encrypting-ftopict187987.html
12
3298
by: kimi | last post by:
Hello, I am running Microsoft SQL Server 2000 on a Windows 2000 Sever. I have been working with SQL Server, Building ASp WebSites for many years now. I am by no means an expert - nor have I had ANY formal training. So ebar with me if my questions seem elementary... I have some questions regarding sensitive data and encryption. There is a project that is headed my way were the social security number is being used as the unique...
3
9846
by: Piotr | last post by:
MS has published on its sites javascript encoder, which enables "encrypting" javascript code. It allows hiding js code from being seen as a text file. There is a decoder for it, available in the net, freeware, srcdec14.exe. I have tested both, encrypting, decrypting, the source and the final files are identical. But what I met on a certain site is a js file, encoded I think in another way, because I cannot decrypt it using the...
6
2096
by: Dayne | last post by:
Guys, I am writing a database application(vb.net , sql server) and is presently storing the connection settings in a xml file...not very secure though. What is a safer method in a dynamic environment? Dayne
1
3272
by: jimfortune | last post by:
This idea is still in the process of formulation. I'm considering the idea of storing encrypted data in memo fields. Since the data is for internal use only I don't think the legal limits on encryption apply. So memo fields are required because I want to use a couple of 500 or so digit safe primes for the encryption. Note that public key encryption has been around for quite a while so some organizations may have a pretty large prime...
0
1527
by: cmrchs | last post by:
Hi, Using the RSA-crypto algorithm in .NET , when actually encrypting/decrypting, all the code samples I ran into always used something like, to encrypt : // create keypair and store in container CspParameters param = new CspParameters(); param.KeyContainerName = "NewKeyContainer"; param.Flags = CspProviderFlags.UseMachineKeyStore; RSACryptoServiceProvider rsaObj = new RSACryptoServiceProvider(param);
7
4106
by: Richard L Rosenheim | last post by:
Anyone care to express their two cents over pros and cons of encrypting the data being transmitted (within the SOAP package) versus just utilizing a HTTPS connection? Richard Rosenheim
11
1958
by: frizzle | last post by:
Hi there, I need an encrypting function, but haven't got a clue where to start. First a string has to be encrypted with two different encryption keys. Both output should be anything a-z / A-Z / 0-9 with a fixed length (e.g. 20 chars). (Preferably the encryption keys should pick chars from a string i give them, to prevent l's and 1's, o's and 0's etc.)
2
1641
by: Amar | last post by:
Hi All, I want to insert my password into the mysql database by encrypting it so that I can also retrieve the password. Before I was using sha1() for encrypting password,but it is an one way method. I want to use a function that can be decrypted . Please help me. Thanks Amar
2
2284
by: SeeSharp Bint | last post by:
Visual Studio 2005, dotnet, c#. Microsoft SQL Server. Windows XP forms application. Temporarily, for my database application, I have been storing the various elements of database connection items like datasource,password,userid as plain strings in the registry. I'd now like to make these secure against people reading them. I thought of encrypting/decrypting each string when i write to the registry but I wouldnt know where to find a...
0
9819
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
11222
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
10810
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
1
10918
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
9625
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
0
7169
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
6041
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
4674
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
3
3275
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.