Forum Moderators: coopster

Message Too Old, No Replies

Encryption of your PHP source code

         

Anyango

5:08 pm on Nov 17, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Yo Folks!

is there any already built module or class (open source) available on the web which enables you to encrypt source code of your php applications. or does any built-in php function provide such facility or can we discuss about implementation of such technology, here.

I am not looking for an "easy way to do so". and any discussion no matter how much complicated and advanced, is welcome. Looking to come up with something powerfull enough that it is unbreakable by a normal or advanced programmer easily.

Thanks
Kami

P.S: Simple reason for this is, "i dont want to give away my code with the product i sale"

Anyango

6:32 pm on Nov 17, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I took a look at MicroEncode on sourceforge but that requires mcrypt library , you cant force your clients to install php libraries ,can you?.

bcolflesh

6:54 pm on Nov 17, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



[zend.com...]

Philosopher

7:09 pm on Nov 17, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I don't know of anything free that doesn't require some type of additional library installed to work properly.

I've heard good things acout Codelock. Seems to be fairly cheap (under $100 if I remember correct) and doesn't seem to require any additional installation by your clients for it to work properly.

I've purchased some php scripts encoded by it and they've worked well.

As always though, YMMV.

madmac

8:10 pm on Nov 17, 2005 (gmt 0)

10+ Year Member



>> Seems to be fairly cheap (under $100 if I remember correct) and doesn't seem to require any additional installation by your clients for it to work properly.

Anything that does not require any additional libraries to do the decoding means that it is PHP itself that is doing the decoding, and it is therefore pretty easy to reverse the encoded script back to the original source.

The top 3 commercial PHP encoders are probably Zend Encoder, ionCube, and SourceGuardian

Anyango

5:47 am on Nov 18, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member




Anything that does not require any additional libraries to do the decoding means that it is PHP itself that is doing the decoding, and it is therefore pretty easy to reverse the encoded script back to the original source.

That's true but can't the additional library be in some sort of "includable" format so you just include those libraries in php code and use functions, instead of having to need to recompile php or install some new module on the client's server. it's gonna be heck of a logistical problem if we would need to also install things other then our product on client's servers whenever someone purchases our product.

Words please.

P.S: I am not looking towards making it unbrekable by a "Hacker", just that clients don't edit it, they don't understand it and this n that. The amount they ll need to pay a hacker to reverse engineer that will be more then what they ll need to pay us for an update ;)

Philosopher

2:45 pm on Nov 18, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Codelock should work fine for what you need and it is definitely the cheapest. They do use an includable file that Key file that handles the encryption.

I would check it out for yourself. Their site has a good bit of info on it. Just search for codelock in G

Anyango

3:51 pm on Nov 18, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Codelock Sounds cool. i think i should give it a go.

madmac

3:22 am on Nov 19, 2005 (gmt 0)

10+ Year Member



>> That's true but can't the additional library be in some sort of "includable" format so you just include those libraries in php code and use functions, instead of having to need to recompile php or install some new module on the client's server.

Yes Zend Encoder, ionCude, and SourceGuardian all allow the "loader" modules to be dynamically included when the script runs. You just have to upload the correct ones for the server when you upload the script. You don't have to mess with PHP module's, although you can manually install them, you don't have to since you can dynamically load them at run time.

Anyango

5:37 am on Nov 19, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Ah that's cool. i ll take a look at em too. I ll let you know about my findings