PHP encoder/encryption

toastyman · 4 May 2006 at 21:32

Wondering if anyone has any experience with protecting php from piracy etc...(like zend guard etc)

I'm looking for a free tool to encrypt php files, but one which will not need to install a plugin on the server to be able to decrypt it.

It doesn't have to be unbreakable...just a deterrant.

Are there any free PHP protectors out there? I've had a look but I can't find any free ones.

Can anyone offer advice?

Cheers
Rich

Beansprout · 4 May 2006 at 21:37

I don't know of any. Think of it this way: PHP is compiled at execution time. So the server needs to have the raw files to compile.

Zend works by encoding them to binary files which are like any other - a compiled program. So you then need the counterpart plugin on the server.

I don't know of any free ones, and I definitely don't know of a method of encrypting PHP files without a plugin on the server.

Ioncube has an online encoder which is nice and cheap, but not so many PHP installations run Ioncube.

toastyman · 4 May 2006 at 21:40

Ah dammit.

I found one (PHTML Encoder ), which claims the following

There are three ways of usage encoded scripts: substitution of existent PHP engine's library file, installation as PHP extension and self-decodeable scripts. In last case you don't need any changes in PHP installations.

I'm quite surprised there aren't aren't any convert to binary utilities out there...I would have thought there would be quite a high demand with people releasing their projects..

Beansprout · 4 May 2006 at 21:44

There are - Zend and Ioncube for example - but they're expensive (well, not if you *need* them).

toastyman · 4 May 2006 at 21:47

Nah i'm a student - no money!

Ah well thanks for answering that query for me

Moredhel · 5 May 2006 at 06:39

Just stick a decent licence on your code and sick the lawyers on anyone who steals it... Far easier, (and may earn you money in the future)

toastyman · 5 May 2006 at 06:59

I would do that, though this my problem.

I wish to have a file (api.php), which is included from the main system code. It would allow me to check the user was using a registered copy of the system, and also allow me to do updates etc...

The problem being the user could just remove the require_once("api.php") statement, so then I would have no knowledge of who is using the system etc..

Beansprout · 5 May 2006 at 09:27

Then add some essential code into that file

NightmareXX · 5 May 2006 at 09:34

Simple thing to do would be to bury your code all over the place. Like with IPB, its got so many files and things, people can't be bothered to find the license bit.

toastyman · 5 May 2006 at 10:00

I guess thats the best way then!

The main point is notifying me when the system is installed, so I can keep checking who has it installed to see if they are complying to the license.

I'd better start burying code all over the place then, and keeping a note of where I put it!

happytechie · 5 May 2006 at 10:01

are there not obsficators for PHP out there?

that'll make it soo hard to understand and deal with the source that no one will be able to re-use your code.

HT

of course there are: http://pobs.mywalhalla.net/

toastyman · 5 May 2006 at 10:22

Ah so it basically changes all the variable names

The problem with that method is I would have to convert the entire system, and wouldn't be able to just do odd pages (which I want to do), as the variable names wouldn't be the same.

unknowndomain · 5 May 2006 at 16:01

toastyman said:
Ah so it basically changes all the variable names

The problem with that method is I would have to convert the entire system, and wouldn't be able to just do odd pages (which I want to do), as the variable names wouldn't be the same.

The bigger problem is that someone could just run the code as is so long as they didnt want to edit it massivley