PHP: How to prevent direct access to JavaScript files?

Question

I have seen that some web sites have a PHP script to redirect the user to another web page if they try to access JavaScript files directly. How is that done?

Just so you know.. This may work in a browser, but it won't stop someone who knows what they are doing. All I would have to do is emulate a browser request from your site to get the javascript files. It's incredibly easy to do. I wouldn't waste my time trying to lock someone out of public files. Also, anyone can go into a utility like FireBug and grab your already loaded javascript with 0 effort, no emulation / forging required. — PiZzL3
– PiZzL3, Commented Apr 23, 2011 at 2:16

BraedenP · Accepted Answer · 2011-04-23 02:36:17Z

1

Unfortunately, as the previous answers have stated, you can't prevent one from seeing the contents of a JS file; if you could do that, how is the browser supposed to parse it?

The next best thing to do is to "Obfuscate" it using something like http://www.javascriptobfuscator.com/default.aspx

This will convert your human-readable code into a bunch of character codes and obscure function names. The Obfuscator I linked to generates a unique ID and bases its encryption on that ID, making it harder to decrypt.

However, this isn't fool-proof, and someone who really wants to get at your JS, for whatever reason, will do it. Anything you really don't want users to have access too should be done server-side. ;)

answered Apr 23, 2011 at 2:36

BraedenP

7,2354 gold badges35 silver badges43 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Wh1T3h4Ck5 · Accepted Answer · 2011-04-23 02:25:00Z

0

No, that's not possible.

There are plenty of ways how to get JS files. Nothing helps in protection.

answered Apr 23, 2011 at 2:25

Wh1T3h4Ck5

8,52910 gold badges63 silver badges82 bronze badges

Comments

Strong Like Bull · Accepted Answer · 2011-04-23 02:29:18Z

0

Javascript is meant to be client side. That means it always gets executed on the browser which is local and thus can not be hidden.

answered Apr 23, 2011 at 2:29

Strong Like Bull

11.3k37 gold badges102 silver badges169 bronze badges

Collectives™ on Stack Overflow

PHP: How to prevent direct access to JavaScript files?

3 Answers 3

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related