Hi all
new member

I'm mainly a php guy
and am designing a php web app at the mo
that will link a number of small companies together, via a central webserver to share information
however, authentication is a major factor, here

seeing as the php can be viewed by the sys-admin (who is employed by one of the companies) I need to be able to hide the authentication method (ie. external to php)

I am thinking of putting together a small set of C libraries for authentication within the php site.

as an example, one will accept a username and hashed password and return true or false

the point is, I don't want the admin of the webserver to know how the authentication is done.

The c libraries will obviously be on the webserver in a non web-accessable folder, and called in php

how easy would it be (is is even possible?) for the sys-admin to decompile the C libraries, and learn what is happening within?

Many thanks
Tony

How smart is he?

I am not a hacker and I have no experience with it, but if he is experienced and persistant I am sure that he could reverse compile it.

However, he would desperately want to see it to do this. Also, he would probably have to have an outstanding knowledge of assembler & C.

__________________
The best damn Sports Blog period.