http://www.perlmonks.org?node_id=261663


in reply to Re: Perl Obsfucate Or Encrypter
in thread Perl Obsfucate Or Encrypter

Read How can I hide the source for my Perl program?. If someone can read the source of your CGI script, they can read the source of the script that the CGI calls (meaning they have access to the system via a means other than the web browser).

Replies are listed 'Best First'.
Re: Re: Re: Perl Obsfucate Or Encrypter
by Itatsumaki (Friar) on May 29, 2003 at 20:07 UTC

    The FAQ you listed didn't seem to say anything about that, did I miss it?

    Either way, can't you get around that by calling the script via backticks (``) or through a system call? If you call a C program via system or backticks does that reveal the object-code to the calling script too?

    -Tats
[reply]
[d/l]
[select]

      You missed the section that contains this key line: (That doesn't mean that a CGI script's source is readable by people on the web, though, only by people with access to the filesystem)

      But you are missing the point too. The source of a CGI script can only be viewed by people with sufficient access to the file system. They have to have shell or local access to view the source code. (Unless you have hosed your web server configuration!) So there is no point in running a script through another script before sending the output to the browser.

[reply]
        Of course, makes perfect sense. ~hits self on head~
        -Tats
[reply]

In Section Seekers of Perl Wisdom