Secure JavaScript?

[exbabylon]

I have some really important javascripts, not because are any fancy coding, but becasue they handle certain, specific calculations. My client has developed various equations that no one else has in his industry, and he provides users a way to use them through JavaScript, is there any way I can secure these scripts? They are extreemly important and will be stolen fast if I cannot somehow make them inaccesable. If I can't totally prevent them from being taken, what's the BEST I can do?

Thank You and God Bless

[sstaubin01]

It sounds to me that this type of information should not be processed on the client but be pulled from a data base on the server. Let's wait a see what others say but this is what server side scripting is all about. It's not as easy as processing the information with a server side scripting langauge because this code can be displayed in the browser if there are problems with the server. The information must be processed with server side includes (SSI) and stored in a directory out side the web root directory. You could put the javascript in an SSI and call the include therefore the code will not display in the browser.

[Owen]

If it's client side and JS is, then there is no way to prevent the user from learning the code. The best thing to do is write a PHP/Perl/Python/etc script which will handle all this server-side.

It's not if, but when.

Owen

[PeterW]

IMHO; You should never use client side scripting for anything other than form verification and graphic effects (like mouse overs). I have seen some people using long escape codes after converting the javascript to %asciscode. This stops any casual browsers, but anyone with a few minutes spare can just paste it into a hex program..
Most servers have perl, a popular CGI program installed. If you are just learning, you may as well go with PHP for web work. I am just starting to really get into it.. it is pretty good

[Karl]

If you want to keep them secure then you will have to do the calculations on the server side as there is no way to stop people getting at the JavaScript if they want it. If the browser can read it then so can anyone else.

[exbabylon]

This is my code below.

Can I put it into a .js file as password protect it? Will my server allow it to be accessed if it is coming from my server? If not could you please help?

I'm not very good in Perl or PHP (Just dove into them), would anyone consider helping me out? Mabey providing an example?

Thank You again?
<Edited by Karl on 12-16-2000 at 04:04 PM>

[Karl]

There is no way of making JS secure even by limiting what hosts can access it, if the browser gets sent the code then someone else can read it.

I have edited your post to save you from your client and what you are trying to avoid as it makes it plainly clear what these calculations are for.

I will write a script for you to do the job.

[Son Nguyen]

Good for us, we have a resposible advisor
Good job Karl!

[westmich]

IMHO, if the code is already written in JavaScript the the easiest solutions would be to reset your pages as ASP and ask your host provider modify your IIS to JavaScript.