Dario Weißer, Johannes Dahse , and Thorsten Holz. PHP is the most popular scripting language for web applications. Because no native solution to compile or protect PHP scripts exists, PHP applications are usually shipped as plain source code which is easily understood or copied by an adversary. In order to prevent such attacks, commercial products such as ionCube, Zend Guard, and Source Guardian promise a source code protection.In this paper, we analyze the inner working and security of these tools ...

This is a PHP 5.2 to PHP 8.1 parser written in PHP. Its purpose is to simplify static code analysis and manipulation.FeaturesThe main features provided by this library are:Parsing PHP 5, PHP 7, and PHP 8 code into an abstract syntax tree (AST).Invalid code can be parsed into a partial AST.The AST contains accurate location information.Dumping the AST in human-readable form.Converting an AST back to PHP code.Experimental: Formatting can be preserved for partially changed ASTs.Infrastructure to traverse and modify ASTs.Resolution ...