从加密分区运行网站
我正在研究从 LAMP 服务器上的加密分区运行基于 PHP 的网站（内置于 symfony）的可能性。这样做的原因是因为客户端可以访问服务器，但我不希望他们看到 php 网站背后的源代码。
如果这是不可能的，我愿意接受其他解决方案。例如，可能从无法轻松访问的虚拟机实例运行该站点。
我不太喜欢简单地混淆代码，因为根据其他帖子，它可以很容易地逆转。
是否可以在人类无法访问/可读的环境中运行 PHP 应用程序？
I am looking at the possibility of running a PHP-based website (built in symfony) from an encrypted partition on a LAMP server. The reason for this is because a client would have access to the server but I don't want them to see the source code behind the php website.
I am open to other solutions if this is not possible. For example, possibly running the site from a virtual machine instance that cant be accessed easily.
I am not a big fan of simply obfuscating the code because, according to other posts, it can be easily reversed.
Is it possible to run a PHP app within an environment which is not human-accessible/readable?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
我不知道加密分区在这里会有什么帮助，因为网络服务器需要访问它，并且有权访问该机器的人会知道如何使用它。
虚拟机可能是最容易保护的东西，因为您可以提供网页，但限制文件系统/RDP 对其的访问。
市场上也有可靠的混淆/预编译解决方案。使用后者，您可以分发同样经过速度优化的字节码，这是呈现给客户端的一个参数。
I don't see how an encrypted partition will help here, as the web server will need access to it, and somebody with access to the machine will know how to use that.
A virtual machine will probably be the easiest thing to secure, because you can serve web pages, but restrict filesystem / RDP access to it.
There are also reliable obfuscation/pre-compilation solutions on the market. With the latter, you can distribute bytecode that is also speed optimized, which is an argument to present to the client.
如果敌人能够物理接触到机器，那么你就已经失败了；他们当然有可能获得源代码。虚拟机内部的加密可能会使其变得更加困难，但他们总是可以转储内存，然后使用描述的技术由 J. Halderman 等人 提取密钥。如果它只是一个加密分区（无虚拟机），它将被安装并易于访问。因此，除非您控制物理机器，否则无论是否加密，都无法确保其免受机器管理员的攻击。
If the enemy has physical access to the machine, you've already lost; it's certainly possible for them to get the source code. Encryption inside a virtual machine might make it a little more difficult, but they can always dump the memory, then use techniques described by J. Halderman et al to extract the keys. And ff it's just an encrypted partition (no VM), it'll be mounted and easily accessible. So no, unless you control the physical machine, you can't secure it from attacks by the machine's administrator, regardless of whether it's encrypted.
垃圾。您将如何运行一个完全隐藏源代码的网站？ Apache 需要它能够使用 PHP 进行处理，以便您的网站正常运行。
Rubbish. How will you run a web-site having source code completely hidden? Apache needs it uncovered to process with PHP in order for your website to work.