> the only thing you can do is way until CFMX hits. if
> you happened to watch the presentation that they did 
> for it at CFSOUTH, (can't remember which one, anyone 
> know? they had this posted on MM site for awhile) 
> supposedly you can now compile your CFM templates to 
> JAVA CLASS files and delete the CFM templates from the 
> server. Thus protecting your code.

I remember one of the first things I found for Java was a decompiler. I
think it was called Mocha, or was that the obfuscator written by the same
person? Maybe Crema was the decompiler, and Mocha was the obfuscator. No,
Google says that I had it right the first time. In any case, the guy who
wrote both of these very soon after Java was released, Hanpeter Van Vliet,
was a good coder who unfortunately died of cancer at a very young age a few
years back.

The point of this trip down memory lane is that if someone has access to
your code, the fact that it's compiled in some way or other is no guarantee
that your code is secure.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444

______________________________________________________________________
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to