Holy Sh*t Batman – sites popping up to decode zend encoded files!: The Zend Encoder is supposed to protect your PHP source by encoding the files so no one can read them. Apparently it doesn’t work, since this guy posted about a bunch os sites advertising that they could decode Zend-encoded files.
(Disclaimer: I don’t know if it works or not — I’ve never used it. I’m just linking to what this guy says.)
Since my company is a customer of this product and rely on this product I’m quite scared as to the slowness of Zend’s response. Being in a competitive security businesses if our competition can decode our scripts and use that new information to release security bulletins about our product it could be horrible for us.
What’s funny is that a guy commented about how he sent some files off to these outfits. Two of them were apparently fake, and one of them send back fake files that they claimed had been decoded.