file encryption ?

Discussion in 'PHP' started by vetrivel, Oct 24, 2009.

  1. #1
    Hi,
    I would like to encrypt my php file and then i need to run the file in the browser.(encryption should not affect the files functionality).

    How to do this?
    Any idea?
     
    vetrivel, Oct 24, 2009 IP
  2. JAY6390

    JAY6390 Peon

    Messages:
    918
    Likes Received:
    31
    Best Answers:
    0
    Trophy Points:
    0
    #2
    Zend encoder?
     
    JAY6390, Oct 24, 2009 IP
  3. jestep

    jestep Prominent Member

    Messages:
    3,659
    Likes Received:
    215
    Best Answers:
    19
    Trophy Points:
    330
    #3
    Ioncube, and sourceguardian are others.

    Not really any good way of doing this because the person using the script has to install a decoding library in php. It's a huge and often impossible task for many website owners who don't control their php installation.
     
    jestep, Oct 24, 2009 IP
  4. JAY6390

    JAY6390 Peon

    Messages:
    918
    Likes Received:
    31
    Best Answers:
    0
    Trophy Points:
    0
    #4
    indeed. It's also possible to decrypt them too...
     
    JAY6390, Oct 24, 2009 IP
  5. szalinski

    szalinski Peon

    Messages:
    341
    Likes Received:
    5
    Best Answers:
    0
    Trophy Points:
    0
    #5
    probably not easily hackable by messers, which is probably worthwhile encoding it for anyway. someone once said encrypting your php source is like having security shutters/fencing around your house, it's not gonna stop those desparate to get in but it'll at least prevent easy access to it.

    also, a little off-topic but i've never seen ioncube decoded.
     
    szalinski, Oct 24, 2009 IP
  6. Pudge1

    Pudge1 Well-Known Member

    Messages:
    912
    Likes Received:
    6
    Best Answers:
    1
    Trophy Points:
    140
    Digital Goods:
    1
    #6
    There is no purpose of encoding your PHP source code what-so-ever.
     
    Pudge1, Oct 24, 2009 IP
  7. dan101

    dan101 Peon

    Messages:
    52
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #7
    I can help you to encrypt your php files widhout zend code, iocube or whatever ... You will don't need to install a decoding library in php
     
    dan101, Oct 25, 2009 IP
  8. JAY6390

    JAY6390 Peon

    Messages:
    918
    Likes Received:
    31
    Best Answers:
    0
    Trophy Points:
    0
    #8
    That will be even easier to decrypt then...
     
    JAY6390, Oct 25, 2009 IP
  9. dan101

    dan101 Peon

    Messages:
    52
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #9
    It can be decrypted but you must be an expert
     
    dan101, Oct 25, 2009 IP
  10. JAY6390

    JAY6390 Peon

    Messages:
    918
    Likes Received:
    31
    Best Answers:
    0
    Trophy Points:
    0
    #10
    give me an example....If it's an eval'd base 64 string then it's not hard for a noob to decrypt. Just replace the eval with an echo and do the same on the output until it has no eval
     
    JAY6390, Oct 25, 2009 IP
  11. dan101

    dan101 Peon

    Messages:
    52
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #11
    yes .. contains base64 too

    Eg. a text will be encoded many times , also characters will be replaced ..

    How it looks - as you can see you can't decrypt this because it is not pure base 64 encode


     
    dan101, Oct 25, 2009 IP
  12. JAY6390

    JAY6390 Peon

    Messages:
    918
    Likes Received:
    31
    Best Answers:
    0
    Trophy Points:
    0
    #12
    No but show me the whole php file...
     
    JAY6390, Oct 25, 2009 IP
  13. jestep

    jestep Prominent Member

    Messages:
    3,659
    Likes Received:
    215
    Best Answers:
    19
    Trophy Points:
    330
    #13
    You could just remove the eval, and print the entire string...
     
    jestep, Oct 25, 2009 IP
  14. JAY6390

    JAY6390 Peon

    Messages:
    918
    Likes Received:
    31
    Best Answers:
    0
    Trophy Points:
    0
    #14
    right, but that code doesn't work :rolleyes:
     
    JAY6390, Oct 25, 2009 IP
  15. hip_hop_x

    hip_hop_x Active Member

    Messages:
    522
    Likes Received:
    5
    Best Answers:
    0
    Trophy Points:
    90
    #15
    echo gzdeflate(base64_decode('9VMlZqYjI1a|2N5QTl|JRFl3T3l|BTkNpQWdKR05o|WTJobFJtbHNaU|RzZ0RRb|2d|JR2xtS0dac|GJHVm|ZaWGhw|YzNSektDUmpZV05v|WlVacGJHV|XBJ'));
    Code (markup):
     
    hip_hop_x, Oct 25, 2009 IP
  16. dan101

    dan101 Peon

    Messages:
    52
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #16
    I told that is a sample ..
     
    dan101, Oct 25, 2009 IP
  17. JAY6390

    JAY6390 Peon

    Messages:
    918
    Likes Received:
    31
    Best Answers:
    0
    Trophy Points:
    0
    #17
    Yeah but the point is is that it can be decrypted VERY easily...
     
    JAY6390, Oct 25, 2009 IP
  18. JAY6390

    JAY6390 Peon

    Messages:
    918
    Likes Received:
    31
    Best Answers:
    0
    Trophy Points:
    0
    #18
    Just a quick demo of how easy any of your encryptions are this way...
    $text = 'eval(gzinflate(base64_decode("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")));';
    
    while(preg_match('%\beval\b%', $text)) {
        $text = preg_replace('%\beval\b%', '$text = ', $text);
        eval($text);
    }
    echo $text;
    PHP:
    The encoded string has been encoded 50 times and with 5 lines of code is completely decoded (I did originally try and show this with 300 encodings but apparently 101904 characters was too many to post ;))
     
    JAY6390, Oct 25, 2009 IP
  19. Brandon_R

    Brandon_R Peon

    Messages:
    330
    Likes Received:
    11
    Best Answers:
    0
    Trophy Points:
    0
    #19
    Some ways of encoding your files are with ioncube and zend encoder. These methods haven't been cracked yet (not that i know of) and cannot be reversed. They can be made to work only on a certain domain and for a certain period of time.
     
    Brandon_R, Oct 25, 2009 IP
  20. vetrivel

    vetrivel Peon

    Messages:
    147
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #20
    Zend and ioncube will request the changes(we need to install it) in the server ,but i dont like to do this.
    That is the reason i am looking fo rhte alternate solution.
     
    vetrivel, Oct 25, 2009 IP