NYCPHP Meetup

[inforequest]

Cliff Hirsch cliff-at-pinestream.com |nyphp dev/internal group use| wrote:

>I am integrating a commercial php shopping cart that uses Ioncube to protect
>some of the source. I've already encountered one problem where Ioncube is not
>compatible with the Zend Studio Server debugger and wonder how it will work
>with Zend Optimizer and opcode caching software like APC.
>
>I'm wondering whether anyone has had experience with Ioncube -- good, bad or
>ugly. Any other unexpected gotchas that I should know about before deploying
>this in a production enviroment?
>
>Cliff
>--
>Pinestream Communications, Inc.
>Publisher of Semiconductor Times & Telecom Trends
>52 Pine Street, Weston, MA 02493 USA
>Tel: 781.647.8800, Fax: 781.647.8825, www.pinestream.com
>
I would review the license to see how it tries to restrict you from 
decoding and viewing/modifying the encoded portions. This becomes an 
issue when time has passed, they no longer support the product or 
perhaps are no longer responsive, or you have other problems you cannot 
resolve (such as phone home or security flaws).

It's a fact of life that encryption engines get cracked eventually, and 
when your competitors (including hackers) know better than you what your 
code is doing, you have an issue.

Currently the hottest area of search engine spamming is the CMS exploit 
- using security flaws in popular CMSs to insert back links onto 
people's web sites without their knowledge nor consent.

-=john andrews
Competitive Webmaster and Search Optimizer


-- 
-------------------------------------------------------------
Your web server traffic log file is the most important source of web business information available. Do you know where your logs are right now? Do you know who else has access to your log files? When they were last archived? Where those archives are? --John Andrews Competitive Webmaster and SEO Blogging at http://www.johnon.com