Fix token scrambling to preserve type hints and magic constants

[archisgore]

Summary

Fixes critical bugs in the token scrambling system that were causing PHP parse errors in WordPress and other applications.

Problems Fixed

1. Type Hints Being Scrambled

Problem: Function parameter type hints like string, int, bool were being scrambled, causing parse errors.

Root Cause: The transformer checked the previous token when it saw (, expecting to find function, but the previous token was the function NAME, not the keyword.

Example error:

PHP Parse error: syntax error, unexpected variable "$text" in wp-includes/compat-utf8.php on line 441

Fix: Walk backwards up to 5 tokens to find the function or fn keyword, correctly detecting parameter lists.

2. Magic Constants Being Scrambled

Problem: PHP magic constants (__DIR__, __FILE__, __LINE__, etc.) were being added to the dictionary and scrambled in the PHP interpreter itself.

Root Cause: The scrambler treated magic constants as regular keywords and scrambled them in both application code AND the PHP interpreter source.

Fix:

• Added MagicConstants map to blacklist these constants
• Modified AddToEEWords() to skip magic constants
• Modified substituteWordsInString() to skip magic constants when processing lexer/parser files

Changes

encrypted-execution/src/transformer/token-aware-transformer.php

• Fixed parameter list detection by walking back through tokens
• Now correctly preserves type hints in function parameters

encrypted-execution/src/scrambler/dictionaryHandler.go

• Added MagicConstants map with all PHP magic constants
• Modified AddToEEWords() to exclude magic constants from dictionary

encrypted-execution/src/scrambler/scrambler.go

• Added magic constant check in substituteWordsInString()
• Prevents scrambling in PHP source files

encrypted-execution/src/scrambler/go.mod

• Added Go module file for proper dependency management

Testing

Tested with WordPress 6.9:

• ✅ Keywords properly scrambled (function → scrambled version)
• ✅ Type hints preserved (string $text stays as string)
• ✅ Magic constants preserved (__DIR__ not scrambled)
• ✅ PHP interpreter successfully recompiled with scrambled tokens
• ✅ Scrambled WordPress files execute correctly

Impact

This fixes the fundamental token scrambling mechanism, enabling:

• WordPress encrypted execution
• Any PHP application using type hints (PHP 7.0+)
• Applications using magic constants

🤖 Generated with Claude Code