How to hide PHP code on the server from other person under root?How do you get PHP, Symlinks and __FILE__ to work together nicely?Apache VirtualHost 403 ForbiddenHow to download a file from server using SSH?How to include file in a bash shell script.htaccess denied vs out of wwwrootHow to download an entire directory and subdirectories using wget?how to pass variables to php from command linehow do I deny php from accessing root directory?Using symlink to use new folder in PHP codeHow to get user system details from a php script running on a linux machine?
Why didn't Thanos use the Time Stone to stop the Avengers' plan?
Why haven't we yet tried accelerating a space station with people inside to a near light speed?
Did this character show any indication of wanting to rule before S8E6?
Can a character with the War Caster feat call a bolt with Call Lightning instead of making an opportunity attack?
Where is Jon going?
Why does the hash of infinity have the digits of π?
Need to read my home electrical Meter
How was Daenerys able to legitimise this character?
How to keep consistency across the application architecture as a team grows?
Is it legal to have an abortion in another state or abroad?
Why A=2 and B=1 in the call signs for Spirit and Opportunity?
Is categoricity retained when reducing the language?
What does kpsewhich stand for?
How to politely tell someone they did not hit "reply to all" in an email?
Python program to take in two strings and print the larger string
How to melt snow without fire or body heat?
On San Andreas Speedruns, why do players blow up the Picador in the mission Ryder?
Is superuser the same as root?
Security vulnerabilities of POST over SSL
What could a self-sustaining lunar colony slowly lose that would ultimately prove fatal?
What's difference between "depends on" and "is blocked by" relations between issues in Jira next-gen board?
Gravitational Force Between Numbers
How do I disable login of user?
Freedom of Speech and Assembly in China
How to hide PHP code on the server from other person under root?
How do you get PHP, Symlinks and __FILE__ to work together nicely?Apache VirtualHost 403 ForbiddenHow to download a file from server using SSH?How to include file in a bash shell script.htaccess denied vs out of wwwrootHow to download an entire directory and subdirectories using wget?how to pass variables to php from command linehow do I deny php from accessing root directory?Using symlink to use new folder in PHP codeHow to get user system details from a php script running on a linux machine?
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
Good day!
There are PHP scripts, classes, configs. All this stuff is interconnected, I need to give a person access to the server so that he works (started under the root) with these scripts, while changing only the config files, and in order to not be able to view the source code.
I've researched various free obsfukators which converting code into something:
<?php include(base64_decode('Li4vY29uZmlnLnBocA=='));include(base64_decode('cHJpdmF0ZS92ZW5kb3IvYXV0b2xvYWQucGhw'));$krc_5bf7f45b=[];foreach($bhi_6f9322e1as $xol_e8b7be43){$xol_e8b7be43=explode(base64_decode('Og=='),$xol_e8b7be43);try$uic_c59361f8=new xee_d9cb1642cko_659fc60();$uic_c59361f8->ldc_aa08cb10($xol_e8b7be43[0],$xol_e8b7be43[1]);$krc_5bf7f45b[]=$uic_c59361f8;catch(Exception $wky_efda7a5a)
What if the files of configs have variable names and it turns out that when obfuscating the main working code, the variables have different names? Not to force the user to run through the obsfukation corrected config every time? So far, this option seems the only one.
Is it possible inside the server under Ubuntu to somehow limit the ability to copy or view or download certain files or make some other methods of protection-hiding, but at the same time with the ability to run this code. It was thought to hide the code somewhere in the depths of the file system folders, calling them random names, and run them somehow through the symlinks by the file name or something like that. Is it possible to?
Option not to provide root access to the server, but to launch via the browser, to give access only to FTP to upload the config to a separate folder. But there are a number of points - all scripts run up to a week, and must be executed as root. How to solve it?
linux
add a comment |
Good day!
There are PHP scripts, classes, configs. All this stuff is interconnected, I need to give a person access to the server so that he works (started under the root) with these scripts, while changing only the config files, and in order to not be able to view the source code.
I've researched various free obsfukators which converting code into something:
<?php include(base64_decode('Li4vY29uZmlnLnBocA=='));include(base64_decode('cHJpdmF0ZS92ZW5kb3IvYXV0b2xvYWQucGhw'));$krc_5bf7f45b=[];foreach($bhi_6f9322e1as $xol_e8b7be43){$xol_e8b7be43=explode(base64_decode('Og=='),$xol_e8b7be43);try$uic_c59361f8=new xee_d9cb1642cko_659fc60();$uic_c59361f8->ldc_aa08cb10($xol_e8b7be43[0],$xol_e8b7be43[1]);$krc_5bf7f45b[]=$uic_c59361f8;catch(Exception $wky_efda7a5a)
What if the files of configs have variable names and it turns out that when obfuscating the main working code, the variables have different names? Not to force the user to run through the obsfukation corrected config every time? So far, this option seems the only one.
Is it possible inside the server under Ubuntu to somehow limit the ability to copy or view or download certain files or make some other methods of protection-hiding, but at the same time with the ability to run this code. It was thought to hide the code somewhere in the depths of the file system folders, calling them random names, and run them somehow through the symlinks by the file name or something like that. Is it possible to?
Option not to provide root access to the server, but to launch via the browser, to give access only to FTP to upload the config to a separate folder. But there are a number of points - all scripts run up to a week, and must be executed as root. How to solve it?
linux
1
If you give somebody root access, they can read all the files, and decode all the things. Additionally, if they can run a file, they must be able to read it.
– Daniel H
Mar 24 at 0:26
Give them sudo access to only run the specific command they need. Don't give them unrestricted root access just because they need to run one command as root
– that other guy
Mar 24 at 6:33
add a comment |
Good day!
There are PHP scripts, classes, configs. All this stuff is interconnected, I need to give a person access to the server so that he works (started under the root) with these scripts, while changing only the config files, and in order to not be able to view the source code.
I've researched various free obsfukators which converting code into something:
<?php include(base64_decode('Li4vY29uZmlnLnBocA=='));include(base64_decode('cHJpdmF0ZS92ZW5kb3IvYXV0b2xvYWQucGhw'));$krc_5bf7f45b=[];foreach($bhi_6f9322e1as $xol_e8b7be43){$xol_e8b7be43=explode(base64_decode('Og=='),$xol_e8b7be43);try$uic_c59361f8=new xee_d9cb1642cko_659fc60();$uic_c59361f8->ldc_aa08cb10($xol_e8b7be43[0],$xol_e8b7be43[1]);$krc_5bf7f45b[]=$uic_c59361f8;catch(Exception $wky_efda7a5a)
What if the files of configs have variable names and it turns out that when obfuscating the main working code, the variables have different names? Not to force the user to run through the obsfukation corrected config every time? So far, this option seems the only one.
Is it possible inside the server under Ubuntu to somehow limit the ability to copy or view or download certain files or make some other methods of protection-hiding, but at the same time with the ability to run this code. It was thought to hide the code somewhere in the depths of the file system folders, calling them random names, and run them somehow through the symlinks by the file name or something like that. Is it possible to?
Option not to provide root access to the server, but to launch via the browser, to give access only to FTP to upload the config to a separate folder. But there are a number of points - all scripts run up to a week, and must be executed as root. How to solve it?
linux
Good day!
There are PHP scripts, classes, configs. All this stuff is interconnected, I need to give a person access to the server so that he works (started under the root) with these scripts, while changing only the config files, and in order to not be able to view the source code.
I've researched various free obsfukators which converting code into something:
<?php include(base64_decode('Li4vY29uZmlnLnBocA=='));include(base64_decode('cHJpdmF0ZS92ZW5kb3IvYXV0b2xvYWQucGhw'));$krc_5bf7f45b=[];foreach($bhi_6f9322e1as $xol_e8b7be43){$xol_e8b7be43=explode(base64_decode('Og=='),$xol_e8b7be43);try$uic_c59361f8=new xee_d9cb1642cko_659fc60();$uic_c59361f8->ldc_aa08cb10($xol_e8b7be43[0],$xol_e8b7be43[1]);$krc_5bf7f45b[]=$uic_c59361f8;catch(Exception $wky_efda7a5a)
What if the files of configs have variable names and it turns out that when obfuscating the main working code, the variables have different names? Not to force the user to run through the obsfukation corrected config every time? So far, this option seems the only one.
Is it possible inside the server under Ubuntu to somehow limit the ability to copy or view or download certain files or make some other methods of protection-hiding, but at the same time with the ability to run this code. It was thought to hide the code somewhere in the depths of the file system folders, calling them random names, and run them somehow through the symlinks by the file name or something like that. Is it possible to?
Option not to provide root access to the server, but to launch via the browser, to give access only to FTP to upload the config to a separate folder. But there are a number of points - all scripts run up to a week, and must be executed as root. How to solve it?
linux
linux
asked Mar 24 at 0:23
wtfownedwtfowned
409
409
1
If you give somebody root access, they can read all the files, and decode all the things. Additionally, if they can run a file, they must be able to read it.
– Daniel H
Mar 24 at 0:26
Give them sudo access to only run the specific command they need. Don't give them unrestricted root access just because they need to run one command as root
– that other guy
Mar 24 at 6:33
add a comment |
1
If you give somebody root access, they can read all the files, and decode all the things. Additionally, if they can run a file, they must be able to read it.
– Daniel H
Mar 24 at 0:26
Give them sudo access to only run the specific command they need. Don't give them unrestricted root access just because they need to run one command as root
– that other guy
Mar 24 at 6:33
1
1
If you give somebody root access, they can read all the files, and decode all the things. Additionally, if they can run a file, they must be able to read it.
– Daniel H
Mar 24 at 0:26
If you give somebody root access, they can read all the files, and decode all the things. Additionally, if they can run a file, they must be able to read it.
– Daniel H
Mar 24 at 0:26
Give them sudo access to only run the specific command they need. Don't give them unrestricted root access just because they need to run one command as root
– that other guy
Mar 24 at 6:33
Give them sudo access to only run the specific command they need. Don't give them unrestricted root access just because they need to run one command as root
– that other guy
Mar 24 at 6:33
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55319627%2fhow-to-hide-php-code-on-the-server-from-other-person-under-root%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55319627%2fhow-to-hide-php-code-on-the-server-from-other-person-under-root%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
If you give somebody root access, they can read all the files, and decode all the things. Additionally, if they can run a file, they must be able to read it.
– Daniel H
Mar 24 at 0:26
Give them sudo access to only run the specific command they need. Don't give them unrestricted root access just because they need to run one command as root
– that other guy
Mar 24 at 6:33