Hide your source code

[axilant]

Alright we all know you cant hide it ALL. But you can now hide it from programs that scan your source code for email addresses and urls. This has already been done yes. But it has not been given out publically for free that i know of.

<?PHP
$data = base64_encode(file_get_contents("http://romazom.com"));
?>
<script language="javascript">
//http://www.aardwulf.com/tutor/viewS...e64/base64.html
//didnt know it was this persons code, as my friend said he made it -_-
 var keyStr = "ABCDEFGHIJKLMNOP" +
                "QRSTUVWXYZabcdef" +
                "ghijklmnopqrstuv" +
                "wxyz0123456789+/" +
                "=";
   function decode64(input) {
      var output = "";
      var chr1, chr2, chr3 = "";
      var enc1, enc2, enc3, enc4 = "";
      var i = 0;

      // remove all characters that are not A-Z, a-z, 0-9, +, /, or =
      var base64test = /[^A-Za-z0-9\+\/\=]/g;
      if (base64test.exec(input)) {
         alert("There were invalid base64 characters in the input text.\n" +
               "Valid base64 characters are A-Z, a-z, 0-9, '+', '/', and '='\n" +
               "Expect errors in decoding.");
      }
      input = input.replace(/[^A-Za-z0-9\+\/\=]/g, "");

      do {
         enc1 = keyStr.indexOf(input.charAt(i++));
         enc2 = keyStr.indexOf(input.charAt(i++));
         enc3 = keyStr.indexOf(input.charAt(i++));
         enc4 = keyStr.indexOf(input.charAt(i++));

         chr1 = (enc1 << 2) | (enc2 >> 4);
         chr2 = ((enc2 & 15) << 4) | (enc3 >> 2);
         chr3 = ((enc3 & 3) << 6) | enc4;

         output = output + String.fromCharCode(chr1);

         if (enc3 != 64) {
            output = output + String.fromCharCode(chr2);
         }
         if (enc4 != 64) {
            output = output + String.fromCharCode(chr3);
         }

         chr1 = chr2 = chr3 = "";
         enc1 = enc2 = enc3 = enc4 = "";

      } while (i < input.length);

      return output;
   }
   var output = decode64('<? print $data; ?>');
   document.write(output);
   
</script>

Cody Selzer

I will be posting a better way to hide a emails, that will actually buffer the entire page, and let my code search through and change the emails, then show the page.

 

[Crabby]

What's the point in:

<?PHP 
class base64 { 

    function encode($data) 
    { 
            return base64_encode($data); 
         
    } 
    function decode($data) 
    { 
            return base64_decode($data); 
    } 
} 
$data = base64::encode(file_get_contents("http://romazom.com")); 
?>

When:

<?php
$data = base64_encode(file_get_contents("http://romazom.com")); 
?>

Is exactly the same thing.

 

[axilant]

actually, i just did that cause i have an actual PHP version of base64, and i didnt feel like adding it... cause i dont want it public. So i just did that.

 

[primacomputer]

Is there some benefit to using a slow PHP version of b64 functions instead of the fast C version that's built in?

 

[Crabby]

Yeah, what primacomputer said.

Still, your code makes absolutely NO sense whatsoever. Doing it the way I quoted is still exactly the same and quicker as it doesn't have to meddle with your OOP.

Also, I don't see a reference to 'aardwolf' in your code. It's not a good thing to ignore the original owners of the code: http://www.aardwulf.com/tutor/viewSource.asp?file=base64/base64.html

 

[Jim_Westergren]

What about this javascript?

<SCRIPT LANGUAGE="JavaScript" type="text/javascript"> 
<!-- Begin 
user = "info"; 
site = "domain.com"; 

document.write('<a href=\"mailto:' + user + '@' + site + '\">'); 
document.write('\ ' + user + '@' + site + '<\/a>'); 
// End --> 
 </SCRIPT> <noscript>You need Java to see my E-mail address</noscript>

I use it myself.

But ok, if you have many adresses on the page it is not a good solution.

 

[primacomputer]

That's every bit as effective as b64 encoding, and a lot smaller as well. Still, you can't count on anything that writes the email address as clear text or as a link. The reason is that many browsers expose the rendered clear text and link collection for IPC. Considering that a script to harvest addresses through a browser is less complicated than many of the “just another perl hacker” one liners I personally think any js obfuscation is just a waste of time.

 

[Jim_Westergren]

:wave: Hi, everyone,

Many talk about hiding source code, no-one has really come up with a answer.

So I built some software which uses a plug-in (like flash) but protects your HTML.

see a example page I setup

I saw the site. But if you use it the visitor has to download the 3 MB plug-in in order to see the site?

 

[unknownz]

we webmasters need to hide our source codes these days . Thanks guyz for all of those codes in this thread

 

[bbalegere]

Nice script.