Protect web content

Hi All,

I am a web developer and I am lately becoming fairly security conscious.

So three questions for you and any help appreciated.

1)I have my hesitations about my web code being revealed to everyone through the "view page source" feature of web browsers. Apparently the source review may reveal quite a few security leaks. Is there a way to prevent people from seeing this?

2)Being a web developer (especially PHP) I would like to know how I can restrict my programs to run on specific domains only. In this way if someone steals my code he can not deploy it on his server.

3)check if activeX or java is enabled before running. These two things will prevent my code from running on browsers that have not got specific features enabled (without which my web program goes mad...).

Thanks for your help all

peter

Hi Peter,

I was looking into this for a while back in December as we needed it at the web development house I part-time work in.

I could not find anything so I tried writing something myself only to fail miserably...
But then around January, I stumbled through google into a kick-ass product. This was exactly what I was looking for.

It offers lots and lots of features that protect your pages and also encodes your source code. So if you try "view page source" you only see garble... And above all you do not have to download any programs.

check it out at: http://www.nesicon.com/webarmour

They offer free trials so let me know if this was what you were looking for

I really can't imagine a scenario where you would present a security leak in your HTML. And PHP cannot be downloaded, copied or viewed unless you have server access.

Hi All,

thx for your replies all.

nostoppingnow the nesicon webarmour tool you proposed really kicks ass.

Just got my free trial and I am amazed. I just encoded my first page and it works like a dream. Plus all the additional options that go with it.Seems like with this tool I can protect from code thiefs as well.

Ryan for your questions:

1) by security leak i am referring to information that can lead to a leak. Surely this is a problem as the infromation someone can gain from reading your code can be valuable. I do not want to go deeply into this as it may not interest many viewers but for more info on this please refer to chapter 7 of "Web hacking - attacks and defence".

2) As for php what you say is true. But working for a web development house that gives off parts of php to clients in order to run on their server we need a tool that protects our code from running on servers that it is not meant to. Hey and guess what: the nesicon webarmour tool does that as well!!!

nothing is completly safe,

( the attached file proves it )

( i have had to delete some of the html pages just to lower the size of the zip )

i know its not php ( that is reasonably safe ) but i can now very easily re-produce the website template if i wanted

__________________
My Recipe forum...don't click here