PHP security : retrieving PHP file from server, un-processed -


Is there really a way to do this? Recovering raw .php file from server (other than getting into server's FTP account)? What are the tools / scripts to encrypt PHP source code?

If this is true, how to defend against it? (Without the use of PHP source code encryption)

Edit: The server is mentioning php is running, such as. Apache-php-mysql, Your Standard Hosting Server Configuration

If you are talking about someone else's server, then there is a short answer if the third If the party can read your PHP source code, it will be a security hole, because the PHP files include database passwords, hash keys, proprietary algorithms and other stuff you do not want to fall into wrong hands.

If you are talking about your own server (i.e. you have your own access), then there is a simple script that you can keep on the server, so that you can access any The file is allowed to specify the path whether it is returned as plain text However, for the reasons mentioned above, you never want to keep such a script on the production server.


Comments