4 ms·
Ask HN: Encrypt/Encode single php file?
We want to encrypt or encode a config file for our web based php app, any suggestions?
- Egregore 15y agoWhy would you like to do it? Against what kind of attacks this encryption should protect?
- realschool 15y agosys admin having access to our database server.
- whichdan 15y agoI'm assuming the sysadmin cannot/would not edit the source? If that's the case, a solution like IonCube might do the trick. Just make sure PDO connection errors aren't displayed/logged, since they may contain connection info. You can also try restricting the sql user's access to the server's IP, but it still may be possible to connect directly from the server itself. If the sysadmin can't access the db, who's managing the db server?
- realschool 15y agoits a managed host, so we dont want them to see. we maintain the db.
- realschool 15y agoIonCube is expensive, any free alternatives, we are a startup.
- deleted 15y ago[deleted]
- wgx 15y agoI've never used it, but a glance at IonCube's site found that they offer encoding of a file for $0.50... http://www.ioncube.com/online_encoder.php http://www.ioncube.com/online_encoder.php
- whichdan 15y agohttp://www.ioncube.com/online_encoder.php http://www.ioncube.com/online_encoder.php I'm not sure how safe this is for running config files, but since the decoder is free, this would be affordable. You can also look into the pricing for Zend Guard.