Posted by Nemon on 12/14/39 11:59

I need to expose some scripting functionality to novice users in a project
of mine. What i wonderd was if anyone knew a way of executing secure PHP
from within a PHP script or an alternative embedded scripting method? Some
interaction between the PHP script host and the secure embedded script are
needed.

I'm currently i'm playing with ASP.NET(C#) and embeded
jscript(spidermonkey) via managed C++ library but it's quite alot of work,
complex.

I already know about runkit but last time i checked it was pretty broken
and lacked execution time limits; I also emailed the author but got no
reply. Perhaps just fixing runkit myself would be a simpler option? Is
this a viable option, can runkit be fixed up to properly secure a PHP
context? Spawning a seperate process for every request is pretty much out
of the question as it's too expensive for what i have in mind, this is for
a windows host so.

I need to allow looping, branching and basic PHP features but no access to
OS resources and absolutely no file system access. I'd also need a way to
impose memory and CPU time restrictions.

Thanks for any help.
--
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/

• Next in forum: Re: Unkowingly Took PHP Job with undgodly PHP Gurus ...
• Prev in forum: Re: How do I check if javascript is enabled in PHP?
• Thread view: Embedding secure scripting language in PHP (req PHP internals expert)

[Reply to this message]