pk-fr / yakpro-po

YAK Pro - Php Obfuscator
http://www.php-obfuscator.com
Other
1.27k stars 354 forks source link

unformat string literal #68

Open the-liquid-metal opened 4 years ago

the-liquid-metal commented 4 years ago

YAK Pro is able to obfuscate string literal. But sadly the output can be deobfuscate. Moreover, the output consumes more space than the original.

What about remove format from the string? Rather than processing plain string, it is better to unformat the string (most likely remove leading space, trailing space, newline, and comment) before processing. It can reduce space and make it harder to read the deobfuscate output.

I thing it is significant to make it harder to read for complex sql statement string or html structure. Most IDE can reformat code, but (if i am not wrong) no IDE can format string. So, you have to reformat it manually in order to understand the logic inside.

Let "remove format" be a separate config entry from "obfuscate string literal", so user can decided whether he want to: remove format prior to obfuscate, obfuscate without remove format, or remove format only.