Obfuscation Encryption of code

Scriptcase 8 Discussion
,
#1

I’m certain I’m not alone here. Many of us are seriously concerned in our code being stolen/copied and other.

  • Encryption or Obfuscation of code,
  • Url’s into secure areas hidden can be an option (3rd party PhantomJS),
  • Any many more items related to security should be by default an option in the SC delivery.

Please advise if this is an option in the SC Roadmap

#2

Encryption should be something external to SC.
About url hidden, I don’t fully understand. With more items related to security, I think is morenusefull if you suggest wich changes/additions.

#3

There are 3rd parties that deliver obfuscation of php code, like nucode. I don’t think that sc will embed tools like these, they are even more expensive than Scriptcase itself. Url’s hidden, i have never seen that. No matter if you use $_POST or $_GET you can get these visible by tools like Tamper. Point is that you need to be aware of these standard php issues. Links cannot be tampered any more (since the beginning of this year) and if you use sessions, you cannot access pages directly without being logged on. Security is a serious issue. But Scriptcase cannot think for the developer, he/she needs to be aware of what he/she does and how it’s done. It’s pretty easy to generate security leaks if you don’t think ahead. Scriptcase can do a lot but not all.

#4

I am testing php protect http://www.phpprotect.info/index.php

I will share my findings.

#5

Thanks so much Moh. I await your update

#6

Wouldn’t a better option be to use Zend or ION Cube to encode it?
Think about it - Scriptcase uses Zend for its product.
They both have free “Loaders” and should offer a performance benefit.

I have no personal experience with either but at least ION Cube has an online encoding service so you can pay as you need indtead of making an outright purchase…
Check here - http://www.ioncube.com/online_encoder.php

#7

@Larry, php Protect didn’t work :frowning:

#8

Sourceguardian

#9

Thanks Gui