Secure Code

[banjax]

Any one know how i can secure my code i saw this whole encryption thing but is there anything easier and better then that. all my pages are php and some include forms and connections to database's

[trq]

Secure them against what?

[waynewex]

You're talking about keeping your PHP files encrypted?

[banjax]

Your normal stuff, my friend told me it would be good if i secured it so users can steal passwords and stuff

[trq]

Your normal stuff, my friend told me it would be good if i secured it so users can steal passwords and stuff

 

As long as your passwords are never echo'd a user cannot see them.

[Mchl]

And as long as Apache (or webserver in general) is configured to never echo php files when php is disabled for some reason. You can move php files containing sensitive data out of servers document root. That's much better solution than encrypting source.

[premiso]

You should always encrypt user passwords with MD5 (a one way hash). This ensures that no one will ever see the clear text password. Although it cannot be reversed, which is a good thing, it protects the user's password. Even if it is echo'd out, it would not do anyone any good.

 

That and I would hope user information is kept in a database such as MySQL.

[Canman2005]

You could use something like

 

http://www.phpcipher.com/