Member Avatar for MB1765

Hello to every body who visit this thread
I want to prevent view source(html tags & javascript scripts) of the page with php. I've studied php manual withuot any success how can I do it? Is it possible

  • 9 Contributors
  • 16 Replies
  • 227 Views
  • 1 Week Discussion Span
  • Latest Post Latest Post by MB1765

Dani AI

Generated

Short answer: there’s no reliable way to hide the HTML/JavaScript that a browser must receive. As and noted, anything sent to the client can be inspected with developer tools. Several replies here (for example , and ) point to encoding/obfuscation as a deterrent, and and mention UI-level tricks — those approaches only slow casual copying; they do not make client-side code secret.

Practical, ordered alternatives that actually help:

  1. Move sensitive logic and credentials to the server. Keep API keys and DB passwords on the server and expose only minimal endpoints.
  2. If the goal is to discourage casual copying (not to secure secrets), minify/obfuscate your JS (Terser, UglifyJS, Closure Compiler, etc.). This raises the effort required to read the code but is reversible.
  3. For stronger obfuscation of algorithms, compile hot code to WebAssembly—it’s harder to reverse but still not foolproof.
  4. Complement technical measures with legal/licensing controls if protecting IP is important.

Concrete workflow example — perform sensitive work server-side and call it from the browser:

// client.js
fetch('/api/compute.php', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({ input: userValue })
})
.then(r => r.json())
.then(data => console.log(data.result));
<?php
// api/compute.php
$body = json_decode(file_get_contents('php://input'), true);
$input = $body['input'] ?? null;
// do sensitive work here; credentials remain only on the server
$result = sensitive_calculation($input);
echo json_encode(['result' => $result]);

Final notes: do not place secrets or critical checks in client code; use HTTPS, short-lived tokens, server-side validation, and rate limiting. Obfuscation and UI tricks only deter novices; for real protection, redesign so the browser never receives the secret logic (which is the approach that best answers ’s original concern).

Recommended Answers

All 16 Replies

Member Avatar for Cerberus

I don't see how you can hide the source that gets sent to the client browser. Code within the PHP tags would be processed at the server end anyway. So data such as database login wouldn't be sent to the client machine anyway.

Member Avatar for MB1765

I know ! But I want prevent show client source of the web. Ofcourse I think that I ask wrong, however generally I want to hide html tags and javascript scripts. What is the solution?

Member Avatar for Cerberus

I don't think this is possible because your web browser requires the source and viewing the source code is a function of the browser.

Is there any particular reason you need to do this?

Member Avatar for MB1765

Yes, I want to hide my javascript functions. I want to block it. but you right it seems impossible with php.

Member Avatar for Member #46692

I don't think this is possible. Encryption might be an idea but that's very very doubtful.

Member Avatar for stymiee

You can't reliably do it. If someone wants it they will get it. If you don't want people to have it, don't put it on thew web.

FYI, your javascript is not special. If you can write it, so can anyone else who knows javascript. Hiding it is pointless.

Member Avatar for dezignwork

I you are writing an application where you want to hide all your code you can use something like Zend or Ioncube.

For Javascript you can use encyption to make it 'harder' to read and copy. If you tell what this javascript does and why should it be protected maybe there is an alternative to having the code more secure.

Tim

Member Avatar for ProgrammersTalk

There's one way to do it, there's one program called HTML Encryptor, you can google search to that. I used to use it a while back.. but it seems useless and crappy because it changed several things... XD a.k.a it's not a reliable software.. :) but pretty nice, they encrypted everything..

Member Avatar for ashneet

One way I can think of which can prevent a novice computer literate person is by using a No Right Click Java Script.

This method can only slow down a person from viewing your source as there are many other way to get the source.
Also you may want to read this Article on why not to use a No Right Click Java Script :

The Article also mentions few ways to prevent source code to be easily read.
Hope that helps...:)

Member Avatar for ProgrammersTalk

One way I can think of which can prevent a novice computer literate person is by using a No Right Click Java Script.

lol, that one won't work.. you can still see it with View --> page source :D

Member Avatar for ashneet

lol, that one won't work.. you can still see it with View --> page source :D

That is why I said it will only slow a person down.:P

Member Avatar for stymiee

It also can be defeated, like all JavaScript, simply by turning JavaScript off. Or, in FireFox, you can even leave JS on and tell FF to block scripts like that.

Member Avatar for Ezzaral

You could do the whole site in Flash I suppose :P
... which of course would be really slow and irritating...

Member Avatar for ProgrammersTalk

Haha, or use Server Side :D

Member Avatar for dr4g

You could use JavaScript Encode, to encode the HTML/page source, so that it isn't readable at all.

Member Avatar for MB1765

thanks but how can I use it?

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.