PAR only filters one of two copies of the script to be placed in the executable

[atopolc]

I am currently using PAR to create an executable that I can deliver to users who don't have perl installed on their machines. The exe has to connect to a database and must contain a password so I thought it would be a good idea to filter the code rather than keep it in plain view. Below is the command I am using to get PAR to filter the code.

pp -f Bleach -o out.exe out.pl

Because the executable is a self extracting zip archive I can open up the contents and take a look with a package like winzip.

To my surprise

There are two versions of the original perl script within the archive. The first is located at
 script/
and is filtered. The other copy is located at
 lib/
and is in plain text.

Does anyone know how to get both copies to filter?

[erroneousBollock]

an executable that I can deliver to users who don't have perl installed on their machines. The exe has to connect to a database and must contain a password

That sounds dubious. Is the database on their network or yours ?

If it's on their network, put the user/pass in a plain textfile that gets read by the executable. You really shouldn't care if it readable by the customer.

If it's on your network, the executable should talk to the database via a carefully crafted set of RPC APIs (SOAP, XMLRPC, JSON, REST, whatever) that use password-auth/ACLs/IPs/certificates as appropriate to secure the service. Even then, you can feel free to store those credentials on the client's disk separately to the executable... just make sure users are aware of the security issues associated with losing/sharing their credentials (and you should have policies to deal with those aspects).

It's a really bad idea to expose an RDBMS over the internet.

-David

[atopolc]

Thanks for your reply. This application is for internal use only, on the same network, on the same database, and not on the internet.

[Anonymous Monk]

I cannot replicate your results with PAR 0.972 ( out.pl only appears under script, bleached).

[atopolc]

I'm running PAR 0.973 on activestate, perl, v5.8.8 built for MSWin32-x86-multi-thread.