Protecting Server Script?

[Zcript3r]

How does one go about protecting HTML, VBScript, JavaScript from being viewed Server Side? We are beginning to work on a product that will be web based, but uses HTML/Script in IIS. We would like to be able to keep the design of this application from eyes which are internal to the company.

Is this possible?

TIA!!
Rob

 

[WizyWyg]

Two words: You can't.

Once a browser receives the info, it will be rendered. You cannot "protect" what is publically viewable.

You can "protect" the backend scripting (like CFM,ASP,PHP etc) but HTML cannot be protected.

What in HTML isn't known by the public already? Its necessary language that builds websites.

there are sites that decrypt encrypted html so there is no point to encrypt your pages (you also will end up alinating visitors if their browser can't render your encrypted html).

 

[stormbind]

WizyWyg,

I don't know if it was an error or not, but rwasiniak74 talks of hiding source from users server side (where the server is) and you are talking of hiding source from users client side (where the web browser is).

Client Side: Consider locking down telnet access if you are concerned about theft of PHP/PERL scripts. You can actually go a long way towards protecting JavaScript client side but it is never 100% bullet proof. You can 99.99999% lock down MSIE, and maybe 99.0% lockdown Mozilla, but because you never aimed to prevent the data being downloaded you cannot prevent it from being stored or displayed by some other (i.e. unknown) client application.

Server Side: Use admin rights to prevent access to certain directories so that only certain members of staff can read the files. This works for sensitive PHP/PERL scripts but is no use for JavaScript because the user can grab via a client.

----------
I'm willing to trade custom scripts for... [see profile]

 

[jimoblak]

http://msdn.microsoft.com/library/d.../en-us/script56/html/seusingscriptencoder.asp

Instead of simply developing a software product, why not also offer a service? If you are responsible for web services, you do not need to worry about protecting your code from another server admin.

- - picklefish - -
Why is everyone in this forum responding to me as picklefish?