ionCube Logo
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

ionCube Forum Index

Search found 8 matches

  Topic: Question about include key
johnnie2

Replies: 4
Views: 14321

PostForum: ionCube PHP Encoder   Posted: Tue Feb 28, 2006 7:56 am   Subject: re
I thought it a good idea to link [url=http://forum.ioncube.com/viewtopic.php?t=283]this thread here as it is somewhat related.
  Topic: Question about include key
johnnie2

Replies: 4
Views: 14321

PostForum: ionCube PHP Encoder   Posted: Tue Feb 28, 2006 3:41 am   Subject: re
You would encode file B to have some properties, say X=Y, but not include attack protection. You would encode C to only work with files that have property X=Y. In this way, B will be able to include C ...
  Topic: storing credit cards in db
johnnie2

Replies: 6
Views: 19359

PostForum: ionCube PHP Encoder   Posted: Fri Feb 24, 2006 8:44 pm   Subject: re
Disclaimer, limitation of liability: don't take anything I say as doctrine. I am not responsible.

IMHO, a good way to approach analyzation of security schemes is to first identify what's really im ...
  Topic: Protecting config data
johnnie2

Replies: 7
Views: 43768

PostForum: ionCube Package Foundry   Posted: Wed Jan 11, 2006 8:26 am   Subject: re
For the interested, the directive for use in the .htaccess file is [url=http://httpd.apache.org/docs/2.0/mod/mod_access.html#deny]Deny from all. The effect is the user meeting with a Forbidden notifi ...
  Topic: Protecting config data
johnnie2

Replies: 7
Views: 43768

PostForum: ionCube Package Foundry   Posted: Wed Jan 04, 2006 6:56 am   Subject: re
Good, I'll take the ensuing silence as a 'no.' Very Happy

I've just integrated [url=http://us3.php.net/manual/en/function.parse-ini-file.php]parse_ini_file() into the configuration settings loading portion ...
  Topic: Protecting config data
johnnie2

Replies: 7
Views: 43768

PostForum: ionCube Package Foundry   Posted: Mon Jan 02, 2006 7:27 am   Subject: re
You both raise very interesting points; overall, the use of PHP configuration files raises very little direct security risk but poses an indirect risk via arbitrary code injection. The main advantage ...
  Topic: Protecting config data
johnnie2

Replies: 7
Views: 43768

PostForum: ionCube Package Foundry   Posted: Sun Jan 01, 2006 7:03 am   Subject: re
Thanks for enlightening me.

I'd made an error in assuming that a remotely-included PHP file would render as the actual PHP code itself, not as the output of this code. Thinking on your post for so ...
  Topic: Protecting config data
johnnie2

Replies: 7
Views: 43768

PostForum: ionCube Package Foundry   Posted: Sat Dec 31, 2005 1:20 pm   Subject: Protecting config data
Reading through the forum posts and docs, I've gathered that IPF provides a Configuration Manager that allows the end-user to edit an application-provided file via a simple text editor. Afterward a ' ...
 
Page 1 of 1
All times are GMT + 1 Hour
Jump to: