How To Encrypt PHP Script Using Zend or Other Application

Discussion in 'PHP' started by techbongo, Jun 23, 2009.

0
  1. #1
    Hi,
    I'm a new to website development. Though, I've done lot of works in PHP-MySQL , but recently I've developed a Help Desk Script using PHP MySQL. But I don't want to publish it under GPL license, I want to sell the script. For that purpose, I need to issue license for the script.

    Now, I feel the need to encrypt some part of the script using Zend/other encoders. I specially hate IONCUBE encoder. So I'll like to get a free solution. Can anybody guide me step by step, how to encrypt my PHP scripts ? Can I use any online tool or software, to encrypt the PHP files directly? Please help.

    PS: I don't know how to use zend, and if there is any built in apache module, that can help me to encrypt the code.:confused:
     
    techbongo, Jun 23, 2009 IP
  2. Vooler

    Vooler Well-Known Member

    Messages:
    1,146
    Likes Received:
    64
    Best Answers:
    4
    Trophy Points:
    150
    #2
    Any encryption which is not based on any server side engine, will be weak and remains breakable.
    Zend, Source Guardian and ioncube are the only two reliable ones. Zend is known to be decompilable some times, but never head of ioncube decompiled. All who claim to decompile ioncube are I think just lamers, becuase it delivers php extensions for decoding and that are compiled binary versions of shared library. But yet, I am building one free solution but cant say when does it come out since it is matter of getting more spare time to complete this extension as well as little Windows NT based encoder software.

    For now you can rely on free online tools that obfuscate the code somehow (BUT IS DECODEABLE BY ADVANCED DEVELOPER WHATEVE MEHOD IS USED), one free though that obfuscates the code is here

    http://www.raizlabs.com/software/phpobfuscator/

    And other online tools:
    PHP Protect
    PHP Encoder
    FOPO

    regards
     
    Vooler, Jun 23, 2009 IP
  3. techbongo

    techbongo Active Member

    Messages:
    309
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    80
    #3
    Thanks for your help and link suggestions. However, I've used PHP Encoder. They are the worst one. They put some melicious code into the encoded stream. That's why, whenever I try to paste the code and save the file, my Antivirus detects it as a trojan.
     
    techbongo, Jun 23, 2009 IP
  4. Vooler

    Vooler Well-Known Member

    Messages:
    1,146
    Likes Received:
    64
    Best Answers:
    4
    Trophy Points:
    150
    #4
    Basically the encrypted code that produces some bytecode cannot actually be pasted as text from clipboard. But as far base64 encoded one yes it can be and none antivirus should consider it a malicious file. Besdies what sort of antivirus you use?

    regards
     
    Vooler, Jun 23, 2009 IP
  5. techbongo

    techbongo Active Member

    Messages:
    309
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    80
    #5
    I use AVG 8.5. And each time I encrypt a script with PHP encoder and try to save a file with the encrypted code, it detects the file as trojan. However, phpobfuscator is really nice.
     
    techbongo, Jun 23, 2009 IP
  6. Vooler

    Vooler Well-Known Member

    Messages:
    1,146
    Likes Received:
    64
    Best Answers:
    4
    Trophy Points:
    150
    #6
    Try this new version and let me know if your antivirus reports same this time. That report of AVG might be based on base64_encoded string for last version, but I hope not this time. btw, now it encodes embedded tags too.

    http://forums.digitalpoint.com/showthread.php?t=1393591

    regards
     
    Vooler, Jun 25, 2009 IP