Re: [PHP] Protecting Commercial PHP Scripts

2004-10-28 Thread Mark-Walter
Hi Curt, > >if ($_SESSION['HTTP_USER_AGENT'] != > > md5($SERVER['HTTP_USER_AGENT'])) ^^^ $_SERVER *g* > If your using the same session for IE and netscape, the behaviour > you are experiencing demonstrates how this can prevent session > hijacking. Netscape, u

Re: [PHP] Protecting Commercial PHP Scripts

2004-10-28 Thread Curt Zirzow
* Thus wrote [EMAIL PROTECTED]: > Hi Dirk, > > > I found this one very usefull: > > http://shiflett.org/php-security.pdf > > Nice docu *g* > > Does someone use this code out from the > docu mentioned aboved ? > > It work's for me only under Explorer, Netscape > switch to exit. > > # > # Verif

Re: [PHP] Protecting Commercial PHP Scripts

2004-10-28 Thread Mark-Walter
Hi Dirk, > I found this one very usefull: > http://shiflett.org/php-security.pdf Nice docu *g* Does someone use this code out from the docu mentioned aboved ? It work's for me only under Explorer, Netscape switch to exit. # # Verify HTTP Header # if (isset($_SESSION['HTTP_USER_AGENT'] )) {

Re: [PHP] Protecting Commercial PHP Scripts

2004-10-26 Thread Curt Zirzow
* Thus wrote Nick Wilson: > Hello all, > > I was wondering if anyone might have suggestions or useful links on > protecting commercial php scripts. One thing that is always overlooked besides trying to obscure the code so only reverse engineering is possible, is to include a license in the sourc

Re: [PHP] Protecting Commercial PHP Scripts

2004-10-26 Thread Richard Davey
Hello Nick, Tuesday, October 26, 2004, 12:44:37 PM, you wrote: NW> I was wondering if anyone might have suggestions or useful links on NW> protecting commercial php scripts. Source Guardian works well enough for me and doesn't require that you have an extension compiled into PHP (like Zend Encod

Re: [PHP] Protecting Commercial PHP Scripts

2004-10-26 Thread Pierre Ancelot
i used turck mmcache you can googlize for it, it works very well, encrypts the code, store most used files in shared memory... in other words, it also opitimise... that's what i preconise On Tuesday 26 October 2004 13:44, Nick Wilson wrote: > Hello all, > > I was wondering if anyone might hav

Re: [PHP] Protecting Commercial PHP Scripts

2004-10-26 Thread Francisco M. Marzoa Alonso
Nick Wilson wrote: * and then Francisco M. Marzoa Alonso declared I was wondering if anyone might have suggestions or useful links on protecting commercial php scripts. I am about to design a system that would be pretty valuable in a very niche market and would not wish the script to be pass

Re: [PHP] Protecting Commercial PHP Scripts

2004-10-26 Thread Nick Wilson
* and then Francisco M. Marzoa Alonso declared > >I was wondering if anyone might have suggestions or useful links on > >protecting commercial php scripts. > > > >I am about to design a system that would be pretty valuable in a very > >niche market and would not wish the script to be passed on

Re: [PHP] Protecting Commercial PHP Scripts

2004-10-26 Thread Francisco M. Marzoa Alonso
Nick Wilson wrote: Hello all, I was wondering if anyone might have suggestions or useful links on protecting commercial php scripts. I am about to design a system that would be pretty valuable in a very niche market and would not wish the script to be passed on to others once downloaded. Suggesti

Re: [PHP] Protecting Commercial PHP Scripts

2004-10-26 Thread Kevin Waterson
This one time, at band camp, Nick Wilson <[EMAIL PROTECTED]> wrote: > Hello all, > > I was wondering if anyone might have suggestions or useful links on > protecting commercial php scripts. > > I am about to design a system that would be pretty valuable in a very > niche market and would not wi

Re: [PHP] Protecting Commercial PHP Scripts

2004-10-26 Thread Dirk Kredler
I found this one very usefull: http://shiflett.org/php-security.pdf You should anyway start at: http://php.net/security/ good luck, Dirk Am Dienstag, 26. Oktober 2004 13:44 schrieb Nick Wilson: > Hello all, > > I was wondering if anyone might have suggestions or useful links on > protecting com

[PHP] Protecting Commercial PHP Scripts

2004-10-26 Thread Nick Wilson
Hello all, I was wondering if anyone might have suggestions or useful links on protecting commercial php scripts. I am about to design a system that would be pretty valuable in a very niche market and would not wish the script to be passed on to others once downloaded. Suggestions, discussion a