Re: [PHP-DB] Code Security
[email protected] (Ethan Rosenberg) Thu, 05 Feb 2015 23:24:06 -0500
| Newsgroups | php.db |
|---|---|
| Message-ID | <[email protected]> |
On 02/05/2015 11:04 AM, Bastien Koert wrote: > I'm with the two Richard's on this, those users shouldn't have telnet > access to the host server at all. Users should be using the browser to > access your site. > > Other than that, the most important thing you can do is to regularly back > up your code and database to another location so that if something happens > to the working box (and likely all tech products, its not IF its WHEN) you > can restore the code and database with minimal data loss > > Bastien > > On Thu Feb 05 2015 at 9:39:43 AM Omar Muhsin <[email protected]> wrote: > >> You forgot this one "keep the box OFFLINE ... best security" :-D >> >> >> On 05-02-15 14:10, Richard Quadling wrote: >>> 1 - Don't allow terminal access to your box. >>> 2 - Use a PHP byte code encoder (IonCube, Zend Guard) - not perfect as >> they >>> can be reversed to access the code in a form. >>> 3 - Don't use PHP. >>> ---- Thanks to all. I apologize, but I did not properly define the problem I am addressing. I have written code for a POS [Point Of Sale] system to be used in a store. I don't expect the store owner to play with the code. His friends [or enemies] might try. There are two logins to the computer, ethan [me] and worker. Worker has to be able to access the code to use it. He has to be blocked from reading, writing or copying the code. How?? TIA Ethan