koto / phar-util

PharUtil - Security-oriented utilities for Phar archives

Home Page:http://blog.kotowicz.net/2010/08/hardening-php-how-to-securely-include.html

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Phar with Encryption

sassyn opened this issue · comments

Hi,

First thanks for the great tool!
Wow!

I'm defiantly going to use it.

I was wonder if you also have an idea or other solution how to encrypt the PHAR file so it could not be read as php code. So even I extract the PHAR file, I will have nothing.

I know about Zend Guard and ionCube that can encrypt your code, but I'm not sure if they support PHAR, in such a way that files inside the PHAR can be encrypted.

My goal is to distributed my php code, which should run on remote clients and make it secure as possible. The solution you develop here is super coool and save me almost 90% of the work, but I'm still missing the option to decode/decrypt the source files.

I have check ionCube and they seems to support PHAR, so I might be able to do so.
but I also going to check bcompiler.

Was wondering if u have any idea how to create a "LOCKED" or phar archive.

Thanks
Sassy