Embedding secure scripting language in PHP (req PHP internals expert)


I need to expose some scripting functionality to novice users in a project of mine. What i wonderd was if anyone knew a way of executing secure PHP from within a PHP script or an alternative embedded scripting method? Some interaction between the PHP script host and the secure embedded script are needed.

I'm currently i'm playing with ASP.NET(C#) and embeded jscript(spidermonkey) via managed C++ library but it's quite alot of work, complex.

I already know about runkit but last time i checked it was pretty broken and lacked execution time limits; I also emailed the author but got no reply. Perhaps just fixing runkit myself would be a simpler option? Is this a viable option, can runkit be fixed up to properly secure a PHP context? Spawning a seperate process for every request is pretty much out of the question as it's too expensive for what i have in mind, this is for a windows host so.

I need to allow looping, branching and basic PHP features but no access to OS resources and absolutely no file system access. I'd also need a way to impose memory and CPU time restrictions.

Thanks for any help.
--
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/
.

Relevant Pages

  • security issue
    ... Is this script secure or am I being abused by spammers? ... PHP SCRIPT ... does not like recipient. ...
    (comp.lang.php)
  • Re: OT? php form and html
    ... > that will execute a cgi-bin script with that login and password. ... > using apache on a linux server and need a password field which is why I ... > be hopefully 'secure' by using PHP ... you cannot secure CGI scripts in Perl using PHP. ...
    (comp.lang.php)
  • RE: [PHP] Re: Where and how do i use $_post etc
    ... immediately adds a degree of security to your script if you're aware of the ... advantages of having even a slightly more secure script, ... Whether your user's submitted form data is in ... > have accessed the form values from the $_POST array within PHP. ...
    (php.general)
  • Re: [PHP] PHP console script vs C/C++/C#
    ... My script is taking a longer time to execute than I want. ... I prefer to write in PHP because that is what I know best. ... This is why I am thinking about rewriting my whole script in a C language. ... Perhaps there are different methods I could be using to speed up execution. ...
    (php.general)
  • Re: How to Add a Feeback Form
    ... I saw nothing in that script that indicates where the form is e-mailed to so ... Greg Maxey/Word MVP ... PHP or not. ... have the support available yet. ...
    (microsoft.public.frontpage.programming)