Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

OK here is a big question. Interpreted languages have many advantages over the compiled languages when it comes to web application.

But what is the ftp server is hacked or the web hosting company views the source of your very popular web application.

Now they can easily see our code. What about trust factor. There are numerous of web host out there and not everybody can be trusted.

Also even hackers[more accurately "crackers"] have access to our code directly.

PS - If I am the owner of Web Hosting Company, I probably wished to see customer's code for study purposes.

share|improve this question
add comment

2 Answers

Its simple really. If you don't trust your hosting company. You don't host with them.

You've got lots of issues if someone can get access to your web-app source code and read/write to it. While there are several defenses which can limit what useful information can be gleaned from source code (like encrypting usernames and passwords) your primary defense should be to ensure that the box does not get compromised in the first place.

If you own a web hosting company and 'study' customer code, you can find yourself in a LOT of trouble. As Lucas mentions, without prior written acceptance, you'll find your more than likely breaking the law.

share|improve this answer
add comment

About viewing the source code: You are walking in dangerous water. Depending on your country that can be considered a violation of the privacy regulation. Without a written statement you simply aren't allowed to do that.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.