Protecting my script

Discussion in 'PHP' started by asgsoft, Oct 7, 2007.

  1. #1
    Hey everyone.

    I have a script which I really would like to sell. However I also would like to give it as much protection as I can.

    So what can I do?

    I am exploring encryption without much success.

    What are your view?

    Do you know any good free encryptors? even better that would offer password protection when decrypted?

    How can I make sure its installed on the domain mentioned?

    any help would be great.
     
    asgsoft, Oct 7, 2007 IP
  2. SGTScripts

    SGTScripts Peon

    Messages:
    26
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #2
    I have used Zend encoder with some good results. I had explored ioncube but there are plenty of decoders out there that take care of your file for less than $5. I am not saying Zend is extremely secure but to decode a file may cost a little more.
     
    SGTScripts, Oct 7, 2007 IP
  3. onurz

    onurz Member

    Messages:
    55
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    43
    #3
    hello,
    i also need an advice in this topic.
    i've a script which so many people are looking for and i want to sell few copies but once i sell few copies i know that it will spread quickly for a little price. how can i protect my code and script? which encoder should i use? or what other advices can you give?
     
    onurz, Oct 7, 2007 IP
  4. wvccboy

    wvccboy Notable Member

    Messages:
    2,632
    Likes Received:
    81
    Best Answers:
    1
    Trophy Points:
    250
    #4
    Try using ionCube for encoding, and Iono or PHPAudit for licensing.

    Both Iono and PHPAudit sell packages included with an encoder, and they are seriously the best and safest way to protect your files.
     
    wvccboy, Oct 7, 2007 IP
  5. asgsoft

    asgsoft Well-Known Member

    Messages:
    1,737
    Likes Received:
    34
    Best Answers:
    0
    Trophy Points:
    160
    #5
    Are there any opensource packages?
     
    asgsoft, Oct 8, 2007 IP
  6. TwistMyArm

    TwistMyArm Peon

    Messages:
    931
    Likes Received:
    44
    Best Answers:
    0
    Trophy Points:
    0
    #6
    There's bencoder, which is a wrapper for various functions provided by PHP itself that are related to bytecode. If you mixed that with a basic authentication system you would do pretty well.

    The bytecode functions of PHP should remove all comments and rename variables etc. I'm not sure, though, how well this would go if you need to keep some functions unchanged, for example. This may be the case if you want to keep a 'normal' API for people to plug in to your code...
     
    TwistMyArm, Oct 8, 2007 IP
  7. onurz

    onurz Member

    Messages:
    55
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    43
    #7
    thanks for the advise. looks like a good solution.
     
    onurz, Oct 8, 2007 IP
  8. chickens

    chickens Peon

    Messages:
    242
    Likes Received:
    11
    Best Answers:
    0
    Trophy Points:
    0
    #8
    As a server admin I would point you to zend or ioncube. Both solutions are on most servers. Most of the other encoding techniques require people to install odd pieces of software into PHP which can be a pain.
     
    chickens, Oct 8, 2007 IP
  9. asgsoft

    asgsoft Well-Known Member

    Messages:
    1,737
    Likes Received:
    34
    Best Answers:
    0
    Trophy Points:
    160
    #9
    Tell me about it

    All the encoders I've seen require lots of manaul work on the server to set them up which would be a pain if I am selling the script and promising "easy to install."
     
    asgsoft, Oct 8, 2007 IP
  10. TwistMyArm

    TwistMyArm Peon

    Messages:
    931
    Likes Received:
    44
    Best Answers:
    0
    Trophy Points:
    0
    #10
    In theory, anything run through that bencoder should work seamlessly as it's part of PHP itself.

    Other than that, there's always obfuscation. I find it useful, but there's lots of people here that will tell you it's absolutely useless.
     
    TwistMyArm, Oct 9, 2007 IP
  11. SGTScripts

    SGTScripts Peon

    Messages:
    26
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #11
    I think ioncube or zend would be the best option for you. Most servers come with zend installed so it would be "easy to install" the only reason they would know it would be encoded with zend is if they tried to edit something on the file other than that it would be great. ioncube would be a more cost effective version not sure exactly what you are willing to invest in script protection.
    someone recommended phpaudit....if you want to go that route its great too but why not setup your own licensing system and then add the encoder of your choice?
     
    SGTScripts, Oct 9, 2007 IP
  12. asgsoft

    asgsoft Well-Known Member

    Messages:
    1,737
    Likes Received:
    34
    Best Answers:
    0
    Trophy Points:
    160
    #12
    what about licensing?

    What do you recommend?
     
    asgsoft, Oct 9, 2007 IP
  13. SGTScripts

    SGTScripts Peon

    Messages:
    26
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #13
    what about a custom md5 hash?
     
    SGTScripts, Oct 10, 2007 IP
  14. asgsoft

    asgsoft Well-Known Member

    Messages:
    1,737
    Likes Received:
    34
    Best Answers:
    0
    Trophy Points:
    160
    #14
    what do you mean?

    can you please expand?
     
    asgsoft, Oct 10, 2007 IP
  15. kendo1979

    kendo1979 Peon

    Messages:
    208
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #15
    is this the creator? http://bencoder.urdada.net/
     
    kendo1979, Oct 10, 2007 IP
  16. TwistMyArm

    TwistMyArm Peon

    Messages:
    931
    Likes Received:
    44
    Best Answers:
    0
    Trophy Points:
    0
    #16
    That's it, yes. I haven't used it at all (I use my own obfuscator) so I can't tell you what it's like but in theory, at least, it should be pretty good.
     
    TwistMyArm, Oct 10, 2007 IP
  17. Chris Blood

    Chris Blood Peon

    Messages:
    1,487
    Likes Received:
    12
    Best Answers:
    0
    Trophy Points:
    0
    #17
    Your wrong. Zend is way more easier to be decoded and theres much more sites as well as proof zend can be decoded, with ioncube theres no proof it can be decoded and and its way better then Zend.
     
    Chris Blood, Oct 17, 2007 IP