IonCube

Hi Guys,

Only just signed up to this list so don't know if someone has submitted
something similar.  We are using eAccelerator 0.9.2a on our cluster
servers and had a customer complaining about its compatibility with
IonCube.  I have created this patch for eAccelerator 0.9.3 based on the
old mmcache patch that IonCube used to issue.  Don't know if it needs it
and it is yet untested.

Regards
Andrew
--
Andrew Hutchings (A-Wing)
Linux Guru - Netserve Consultants Ltd. - www.domaincity.co.uk
Admin - North Wales Linux User Group - www.nwlug.org.uk
BOFH excuse 40: not enough memory, go get system upgrade

Hi Andrew, it's interesting, we will take a look at this.

Patch has been put in the patch tracker here :
http://sourceforge.net/tracker/inde... />
tid=692866


Andrew Hutchings wrote:
> Hi Guys,
>
> Only just signed up to this list so don't know if someone has submitted
> something similar.  We are using eAccelerator 0.9.2a on our cluster
> servers and had a customer complaining about its compatibility with
> IonCube.  I have created this patch for eAccelerator 0.9.3 based on the
> old mmcache patch that IonCube used to issue.  Don't know if it needs it
> and it is yet untested.
>
> Regards
> Andrew
> --
> Andrew Hutchings (A-Wing)
> Linux Guru - Netserve Consultants Ltd. - www.domaincity.co.uk
> Admin - North Wales Linux User Group - www.nwlug.org.uk
> BOFH excuse 40: not enough memory, go get system upgrade


-------------------------------------------------------
This SF.Net email is sponsored by Yahoo.
Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
Search APIs Find out how you can build Yahoo! directly into your own
Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005

Thanks,

BTW.  have created a FC3 src rpm and a binary rpm for php 4.3.10 if
required.

Regards
Andrew

On Fri, 2005-05-27 at 13:36 +0200, franck@exeprod.com wrote:
> Hi Andrew, it's interesting, we will take a look at this.
>
> Patch has been put in the patch tracker here :
> http://sourceforge.net/tracker/inde...>
&atid=692866
>
>
> Andrew Hutchings wrote: 
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by Yahoo.
> Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
> Search APIs Find out how you can build Yahoo! directly into your own
> Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005
>  ________________________________________
_______
> eAccelerator-developers mailing list
> eAccelerator-developers@lists.sourceforge.net
> https://lists.sourceforge.net/lists...ator-developers
>
--
Andrew Hutchings (A-Wing)
Linux Guru - Netserve Consultants Ltd. - www.domaincity.co.uk
Admin - North Wales Linux User Group - www.nwlug.org.uk
BOFH excuse 147: Party-bug in the Aloha protocol.



-------------------------------------------------------
This SF.Net email is sponsored by Yahoo.
Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
Search APIs Find out how you can build Yahoo! directly into your own
Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005

Hi Franck,

Scrap that patch, the support guy at IonCube is an idiot, IonCube just
closes as soon as it sees eA as they treat it as untrusted (just like
Zend Optimizer it appears).  A**holes :)

Regards
Andrew

On Fri, 2005-05-27 at 13:36 +0200, franck@exeprod.com wrote:
> Hi Andrew, it's interesting, we will take a look at this.
>
> Patch has been put in the patch tracker here :
> http://sourceforge.net/tracker/inde...>
&atid=692866
>
>
> Andrew Hutchings wrote: 
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by Yahoo.
> Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
> Search APIs Find out how you can build Yahoo! directly into your own
> Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005
>  ________________________________________
_______
> eAccelerator-developers mailing list
> eAccelerator-developers@lists.sourceforge.net
> https://lists.sourceforge.net/lists...ator-developers
>
--
Andrew Hutchings (A-Wing)
Linux Guru - Netserve Consultants Ltd. - www.domaincity.co.uk
Admin - North Wales Linux User Group - www.nwlug.org.uk
BOFH excuse 424: operation failed because: there is no message for this
error (#1014)



-------------------------------------------------------
This SF.Net email is sponsored by Yahoo.
Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
Search APIs Find out how you can build Yahoo! directly into your own
Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005

pffff :(

Andrew Hutchings wrote:
> Hi Franck,
>
> Scrap that patch, the support guy at IonCube is an idiot, IonCube just
> closes as soon as it sees eA as they treat it as untrusted (just like
> Zend Optimizer it appears).  A**holes :)
>
> Regards
> Andrew
>
> On Fri, 2005-05-27 at 13:36 +0200, franck@exeprod.com wrote:
> 
>
> --
> Andrew Hutchings (A-Wing)
> Linux Guru - Netserve Consultants Ltd. - www.domaincity.co.uk
> Admin - North Wales Linux User Group - www.nwlug.org.uk
> BOFH excuse 424: operation failed because: there is no message for this
> error (#1014)
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by Yahoo.
> Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
> Search APIs Find out how you can build Yahoo! directly into your own
> Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005
>  ________________________________________
_______
> eAccelerator-developers mailing list
> eAccelerator-developers@lists.sourceforge.net
> https://lists.sourceforge.net/lists...ator-developers


-------------------------------------------------------
This SF.Net email is sponsored by Yahoo.
Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
Search APIs Find out how you can build Yahoo! directly into your own
Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005

Andrew Hutchings wrote:

>Hi Guys,
>
>Only just signed up to this list so don't know if someone has submitted
>something similar.  We are using eAccelerator 0.9.2a on our cluster
>servers and had a customer complaining about its compatibility with
>IonCube.  I have created this patch for eAccelerator 0.9.3 based on the
>old mmcache patch that IonCube used to issue.  Don't know if it needs it
>and it is yet untested.
>
>Regards
>Andrew
>--
>Andrew Hutchings (A-Wing)
>Linux Guru - Netserve Consultants Ltd. - www.domaincity.co.uk
>Admin - North Wales Linux User Group - www.nwlug.org.uk
>BOFH excuse 40: not enough memory, go get system upgrade
>
>
>------------------------------------------------------------------------
>
>--- eaccelerator-0.9.3/eaccelerator.c	2005-05-11 09:19:10.000000000 +0100
>+++ eaccelerator.c	2005-05-27 12:05:06.000000000 +0100
>@@ -4337,6 +4337,7 @@
>       } else if (strcmp(ext->name, "pcntl") == 0) {
>       } else if (strcmp(ext->name, "DBG") == 0) {
>       } else if (strcmp(ext->name, "Xdebug") == 0) {
>+      } else if (strcmp(ext->name, "the ionCube PHP Loader") == 0) {
>       } else if (strcmp(ext->name, "Advanced PHP Debugger (APD)") == 0) {
>       } else if (strcmp(ext->name, "Zend Extension Manager") == 0 ||
>                  strcmp(ext->name, "Zend Optimizer") == 0) {
>
>
There was support for IonCube in eAccelerator/mmcache. Take a look in
the code and you will find two parts commented out that are used to make
eA compatible with IonCube. I don't know why they are removed or who did
it. I had a report from someone who just added those pieces back to eA
and it worked again. So you can try that. You're patch only comments one
part back in. I don't have time to look at it and test it. If you try
it, let us know how it turned out. Thanks!

Bart

--
Bart Vanbrabant <bart.vanbrabant@zoeloelip.be>
PGP fingerprint: 093C BB84 17F6 3AA6 6D5E  FC4F 84E1 FED1 E426 64D1

On Fri, 2005-05-27 at 17:01 +0200, Bart Vanbrabant wrote:
> Andrew Hutchings wrote:
> 
> There was support for IonCube in eAccelerator/mmcache. Take a look in
> the code and you will find two parts commented out that are used to make
> eA compatible with IonCube. I don't know why they are removed or who did
> it. I had a report from someone who just added those pieces back to eA
> and it worked again. So you can try that. You're patch only comments one
> part back in. I don't have time to look at it and test it. If you try
> it, let us know how it turned out. Thanks!
>
> Bart
>
> --
> Bart Vanbrabant <bart.vanbrabant@zoeloelip.be>
> PGP fingerprint: 093C BB84 17F6 3AA6 6D5E  FC4F 84E1 FED1 E426 64D1
>

The word from IonCube is this:

If you're using the standalone Encoder, it's because you encoded your
scripts to block untrusted extensions. Untrusted is essentially anything
that's opensource. Prior to version 5, where the default is to allow
untrusted extensions, you need to enable the option to allow untrusted
extensions.

If you're using the online Encoder then currently untrusted extensions
are also not allowed, but we've changed this behaviour already for the
next minor Loader update. Files encoded by the standalone Encoder will
still have the ability to be protected against untrusted extensions
though if the encodee wishes.



So basically IonCube is naturally compatible unless someone deliberately
encodes a script without support for open source extensions such as eA.
If looks as though Zend Optimizer has dome something similar in its
latest versions as it won't even load the extension with untrusted
extensions (according to the error provided).
Don't know if that commented code would work around that, it kinda looks
as though it changes the extension loading order which has probably
already been patched against in IonCube.  I have already told our
customer no anyway so not so important anymore.
Although anything else I can contribute I will be glad to help though.

Regards
Andrew
--
Andrew Hutchings (A-Wing)
Linux Guru - Netserve Consultants Ltd. - www.domaincity.co.uk
Admin - North Wales Linux User Group - www.nwlug.org.uk
BOFH excuse 51: Cosmic ray particles crashed through the hard disk
platter



-------------------------------------------------------
This SF.Net email is sponsored by Yahoo.
Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
Search APIs Find out how you can build Yahoo! directly into your own
Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005

> I don't know why they are removed or who did it.
>
> Bart
>

It's a commit from Dmitry into TurckMMCache,
Mon Jun 9 13:41:38 2003 UTC (23 months, 2 ws ago)

diff :
http://cvs.sourceforge.net/viewcvs....r />
6&r2=1.87

Comment (/*???) don't change since this date, and can
be found in eaccelerator.c

http://cvs.sourceforge.net/viewcvs.....26&view=markup
(search for ionCube)



-------------------------------------------------------
This SF.Net email is sponsored by Yahoo.
Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
Search APIs Find out how you can build Yahoo! directly into your own
Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005

On Fri, 2005-05-27 at 20:03 +0200, franck@exeprod.com wrote: 
>
> It's a commit from Dmitry into TurckMMCache,
> Mon Jun 9 13:41:38 2003 UTC (23 months, 2 ws ago)
>
> diff :
> http://cvs.sourceforge.net/viewcvs..../>
.86&r2=1.87
>
> Comment (/*???) don't change since this date, and can
> be found in eaccelerator.c
>
> http://cvs.sourceforge.net/viewcvs.....26&view=markup
> (search for ionCube)

Just tested uncommenting this (I'm bored and not in the mood to bugfix
dovecot).  Doesn't seem to change anything encoded files with the open
source block on are still blocked.  IonCube appears to work fine with
unpatched eaccelerator anyway when the scripts let it.

Regards
Andrew
--
Andrew Hutchings (A-Wing)
Linux Guru - Netserve Consultants Ltd. - www.domaincity.co.uk
Admin - North Wales Linux User Group - www.nwlug.org.uk
BOFH excuse 226: A star wars satellite accidently blew up the WAN.



-------------------------------------------------------
This SF.Net email is sponsored by Yahoo.
Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
Search APIs Find out how you can build Yahoo! directly into your own
Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005

I can confirm that our server is running PHP v4.3.10 + Zend Optimizer v3.0.1
 + IonCube 3.1.13 + eAccelerator 0.9.3.

See:

http://www.designrem.com/phpinfo.php

Server feedback:

[root@ns eaccelerator-0.9.3]# php -v
PHP 4.3.10 (cli) (built: Jun  2 2006 01:59:31)
Copyright (c) 1997-2004 The PHP Group
Zend Engine v1.3.0, Copyright (c) 1998-2004 Zend Technologies with eAccelera
tor v0.9.3, Copyright (c) 2004-2005 eAccelerator, by eAccelerator with the i
onCube PHP Loader v3.1.13, Copyright (c) 2002-2006, by ionCube Ltd., and wit
h Zend Extension Manager v1.0.10, Copyright (c) 2003-2006, by Zend Technolog
ies with Zend Optimizer v3.0.1, Copyright (c) 1998-2006, by Zend Technologie
s

Step 1:

Alter your php.ini to match this:
---start extract from php.ini---
[Zend]
zend_extension="/usr/lib/php4/eaccelerator.so"
eaccelerator.shm_size="16"
eaccelerator.cache_dir="/tmp/eaccelerator"
eaccelerator.enable="1"
eaccelerator.optimizer="1"
eaccelerator.check_mtime="1"
eaccelerator.debug="0"
eaccelerator.filter=""
eaccelerator.shm_max="0"
eaccelerator.shm_ttl="0"
eaccelerator.shm_prune_period="0"
eaccelerator.shm_only="0"
eaccelerator.compress="1"
eaccelerator.compress_level="9"

zend_extension=/usr/local/lib/ioncube_loader_lin_4.3.so

zend_optimizer.optimization_level=0
zend_extension_manager.optimizer=/usr/local/Zend/lib/Optimizer-3.0.1
zend_extension_manager.optimizer_ts=/usr/local/Zend/lib/Optimizer_TS-3.0.1
---end extract from php.ini---

Step 2: Check that zend Optimizer level is 0, as shown above in step 1, with
 the line "zend_optimizer.optimization_level=0".

Step 3: Check that the order of loading is eaccelerator, IonCube, and Zend O
ptimizer, as shown above in step 1. If IonCube is loaded after eaccelerator,
 it rejects it as an unsigned extension.

Step 4: Add the patch to eAccelerator 0.9.3 to enable compatibility with Ion
Cube. This involves editing file "eaccelerator.c" to add the patch:

--- eaccelerator-0.9.3/eaccelerator.c	2005-05-11 09:19:10.000000000 +0100
+++ eaccelerator.c	2005-05-27 12:05:06.000000000 +0100
@@ -4337,6 +4337,7 @@
       } else if (strcmp(ext->name, "pcntl") == 0) {
       } else if (strcmp(ext->name, "DBG") == 0) {
       } else if (strcmp(ext->name, "Xdebug") == 0) {
+      } else if (strcmp(ext->name, "the ionCube PHP Loader") == 0) {
       } else if (strcmp(ext->name, "Advanced PHP Debugger (APD)") == 0) {
       } else if (strcmp(ext->name, "Zend Extension Manager") == 0 ||
                  strcmp(ext->name, "Zend Optimizer") == 0) {

Step 5: Rebuild the sources, see the readme file.

Step 5a: copy eaccelerator into your php extensions directory.

Step 6: restart PHP, on our RedHat Enterprise 3 box, the command is:

service httpd restart

Step 7: Check that PHP is running ok, with the line:

php -v

Step 8: Check that your site is working.

I can confirm that our server is working beautifully with eAccelerator. 

Some other thoughts: APC didn't work on our server. Zend Optimizer doesn't i
ncrease performance at all - its only for running Zend encoded files. You ne
ed Zend performance suite for this. APHP didn't work. eAccelerator rocks!!