Encoding ASP files

17 May 2006 4:19 PM

Peter Conlan

Does anyone know of a good way to encode/encrypt ASP files so the code is
hidden, but still able to be read by IIS when requested? I have done some
searches and have found that using vbscript.encode would work, but that it
is very weak and tools are readily available to decode them. I have also
seen two products that claim to do this, but they either just used
vbscript.encode, or didn't work even on extremely simple asp files.

Does anyone else do something like this?

Thanks

17 May 2006 4:29 PM

Aaron Bertrand [SQL Server MVP]

Compile the code to a DLL. Or move your site to a server where you have
some trust in the security of the file system (or the people with legitimate
access to it).

http://www.aspfaq.com/2163

Show quote

"Peter Conlan" <b***@a.com> wrote in message
news:%237WQg2ceGHA.3888@TK2MSFTNGP02.phx.gbl...
> Does anyone know of a good way to encode/encrypt ASP files so the code is
> hidden, but still able to be read by IIS when requested? I have done some
> searches and have found that using vbscript.encode would work, but that it
> is very weak and tools are readily available to decode them. I have also
> seen two products that claim to do this, but they either just used
> vbscript.encode, or didn't work even on extremely simple asp files.
>
> Does anyone else do something like this?
>
> Thanks
>

17 May 2006 5:51 PM

Larry Bud

Peter Conlan wrote:

> Does anyone know of a good way to encode/encrypt ASP files so the code is
> hidden, but still able to be read by IIS when requested? I have done some
> searches and have found that using vbscript.encode would work, but that it
> is very weak and tools are readily available to decode them. I have also
> seen two products that claim to do this, but they either just used
> vbscript.encode, or didn't work even on extremely simple asp files.
>
> Does anyone else do something like this?

2 or 3 years ago I looked at ASP Lightning, and it did a pretty good
job. I imagine that by now they've worked out a few bugs.

This program compiled your ASP and created a DLL, then it changed your
ASP to call the DLL automatically.