I have yet to find a response by anyone from Zend on this matter but it seems sites are popping up all over the place that can decode Zend Encoded scripts. Since my company is a customer of this product and rely on this product I'm quite scared as to the slowness of Zend's response. Being in a competitive security businesses if our competition can decode our scripts and use that new information to release security bulletins about our product it could be horrible for us. 20% of our code was written by a guy who barely knew php years back so I'm glad no one can see it. This is bad indeed.

http://www.qinvent.com/cyrj/dezender/index-en.php

http://phpdecode.com/

http://www.phprecovery.com/

http://www.zic-recovery.com/

as well as a few others.

Ready for More?

Follow Me @jimplush