Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:74406
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.213.44 as permitted sender)
MIME-Version: 1.0
Date: Wed, 21 May 2014 12:20:43 +0200
Message-ID: <CAOg_pRQxKsJPgFaZ6_y7Rf1i4Bfkbx+FhCxuBtE9PWu58uOfOQ@mail.gmail.com>
To: PHP Internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=089e0122a3d450ef6804f9e6599d
Subject: encode php scripts with opcache compatibility
From: nicolai.scheer@gmail.com (Nicolai Scheer)

--089e0122a3d450ef6804f9e6599d
Content-Type: text/plain; charset=UTF-8

Hi all,

I'm currently facing the situation, that I need to protect my php sources
and retain opcache compatibility.

I know there are quite a few commercial tools for "encoding" and protecting
php sources, but none of them seems to work in conjunction with php's
opcache extension.

Most products see this as part of their protection scheme.

Basically it would be ok to just dump the _zend_op_array struct (defined in
zend_compile.h) to a file and make the zend engine able to load it again.
Once it is loaded, it could be server from opcache.

Unfortunately bcompiler is not (yet?) compatible with php 5.5.x, and
digging through the source it seems to be not an easy task to serialize the
opcode array (seems as if the code is borrowed from apc).

I also had a look at blenc, which just overrides the compile_function to
read an encrypted source file and then compile the resulting string. This
might be a first solution, though I'd rather deliver opcodes to the
client's server than just an encrypted script. Sadly blenc just crashes php
when it tries to serve an encrypted script from opcache and I could not
figure out yet, what's wrong there (tested on windows and linux using php
5.5.12).

Is there any solution for my situation?
Are there any plans to add the "serialize opcode to string, dump string to
file and load it again"-functionality to php?
How easy would it be to add this functionality?

Maybe there are already functions I don't know about to ease this process ?

Any hint is greatly appreciated!

Greetings

Nico

--089e0122a3d450ef6804f9e6599d--