PHP: Re: [phpXperts] Re: Issue with code security

Friday, May 27, 2011

Re: [phpXperts] Re: Issue with code security

You can't hide the code for html/css/js. Because, if u do, a browser would never know what to do with them and fail to render the page. Content of these type of files are MEANT to be visible for public, and thus the browser itself.

For your case, does it show the php code? the code u used to implement your server side logic? Then there is a problem with your apache/php settings, which doesn't handle php files as it should. u will need to fix that in this case.

Also, as a rule of thumb, u should avoid putting sensitive information in any public viewable files, so that a malicious user doesn't get any idea how to break into your system :)

On Sat, May 28, 2011 at 10:24 AM, Mynul <mynul9280@gmail.com> wrote:

Buddy you are using open source technology and trying to hide your code, that doesn't sound good!

anyways, your issue is very old and there were much talk about it in this group earlier. from my point of view - you cannot hide your code unless you use some 3rd part encrypting software, you may google for such s/w. there are many of them. or else some silly tweaking, like press some hundreds of enter at the beginning of your code and then write original code so that it would not be visible at the first look.

well it's your site/project so you may go anyways but I again would like to ask you not to go for it until it's a dying need. Because you are an open source user and others have got right to take help from you.

other Xperts might suggest you something better. best of luck!

Thanks
Mynul.

--- In phpexperts@yahoogroups.com, Guruï¿½ <nagendra802000@...> wrote:
>
> Hi Arif, Its showing the entire code except my mysql database details (Thank
> God). But the issue is if I click on "*\js\mouse.js*" in the code its
> showing the entire JS script. Any advance user can see how I coded the site.
> I need some help so that I can hide those codes from users.
>
> On Fri, May 27, 2011 at 11:50 PM, Arif Uddin <arifrhb@...> wrote:
>
> >
> >
> > Hi *Guruï¿½
> >
> > *If you use php script code, it not shows at view code. only the html or

> > view code shows. so, don't worry about it.
> >
> > *---
> > Md. Arif Uddin *
> > Dhaka, Bangladesh
> > Mobile: +88 017 15 865458
> > E-mail: arifrhb@...

> > http://www.sobkichu.com
> > http://www.ankursoftbd.com/arif
> >
> >
> >
> > 2011/5/27 Guruï¿½ <nagendra802000@...>

> >
> >>
> >>
> >> Hi All,
> >>
> >> I have a HTML form with few fields which I have further connected with a
> >> PHP to POST the data into mysql. My question is how do I hide the source
> >> code so that if a user select the Firefox option "view the page source", he
> >> can not be able to see my script completely. Right now I can see the codes
> >> completely. Is their any way to secure the script?
> >>
> >> --
> >> *Best,
> >> *
> >> *Guruï¿½*
> >>
> >>
> >
> >
>
>
>
> --
> *Best,
> *
> *Guruï¿½*
>