Protection of PHP applications 1

[Sleidia]

Hello

I just read this :

http://www.eweek.com/article2/0,1895,1948765,00.asp

... and it made me wonder : what are the other ways to prevent your PHP application from being stolen or sold to third parties by one of your client??

 

[zeland]

There is a module called bcompile from pear/pecl. However, I've never been able to get this module to compile. Has anybody used this with success before?


--== Anything can go wrong. It's just a matter of how far wrong it will go till people think its right. ==--

 

[Sleidia]

Never heard of that

BTW, all means of protection can be discussed here.
Code obfuscation is one solution but maybe there are others (ie: licensing? , specific clauses in contracts? , other?)

 

[zeland]

Just incase you're interested: bcompiler


--== Anything can go wrong. It's just a matter of how far wrong it will go till people think its right. ==--

 

[Sleidia]

Hi guys

I'd like to revive this thread for 2 reasons :

1) I'm still interested in knowing about ways to protect PHP applications.

2) I've created a CMS and, I order to prevent my clients from reselling it to third parties, I had the idea to keep it on my own server. The main idea is to let it remotely manage the content of my clients' websites which will be hosted somewhere else.

Now, what I need to know is : how can you secure a website when, at the same time, you have to allow a distant CMS application to create/delete directories or to update a database? Isn't it contradictory???

Thanks for your opinions

 

[sleipnir214]

1. Besides the obvious Zend products, there are SourceGuardian and ionCube. I've ised neither, but there are good reviews out there for both.

2. I define "securing a website" as "allowing users authorized access to data while simultaneously disallowing unauthorized access". Although your two requirements are difficult to achieve at once, they are not inherently contradictory. Just think of the foreign CMS application as a user.



Want the best answers? Ask the best questions! TANSTAAFL!

 

[Sleidia]

Thanks for this great post
It helped a lot

 

[hercj]

I have heard good things about Truck MMCache and it has a web based front end available called PHPCoder.
Truck MMCache-

http://turck-mmcache.sourceforge.net/index_old.html#req

PHPCoder-

http://phpcoder.sourceforge.net/

 

[Sleidia]

Doesn't look good to me.
The products introduced by sleipnir look more user-friendly.
Also, with mmcache, it's nor clear whether you need the application to be installed on the target server for decoding.