TalkPHP
 
 
Account Login
Latest Articles
» The basic usage of PHPTAL, a XML/XHTML template library for PHP
» Vulnerable methods and the areas they are commonly trusted in.
» Simple way to protect a form from bot
» The Basics On: How Session Stealing Works
» How to keep your forms from double posting data
IRC Channel
IRC Speech Bubble Join the friendly bunch on IRC...
(#TalkPHP on Freenode)

...Also available via a web interface.

See this thread for information on the TalkPHP Free Hugs Initiative™. Subject to availability.
Associates
Associates
CSS Tutorials
Reply
 
LinkBack Thread Tools Search this Thread Display Modes
Old 10-15-2008, 01:01 AM   #1 (permalink)
The Visitor
Newcomer 
 
Join Date: Oct 2008
Posts: 2
Thanks: 0
komrad is on a distinguished road
Default Copyright for any php programs

Hello all,

I wrote a PHP program and I want to add a line of text to the bottom of a page as a copyright. I don't want my customers to be able to remove this line. Would it be possible to make it so if they remove it, the program no longer works? or make it complicated to remove?

Any help greatly appreciated.
__________________
Global Domains Intl
komrad is offline  
Reply With Quote
Old 10-15-2008, 08:08 AM   #2 (permalink)
The Frequenter
 
ReSpawN's Avatar
 
Join Date: Nov 2007
Location: Netherlands
Posts: 460
Thanks: 49
ReSpawN is on a distinguished road
Default

In this case, you would immediately come into the license system. This would mean you are going to replace certain characters from a string to make it irretrievable, but convertible to plain text once again.

Certain programs just have a license file, but a certain function would say is_licenseced() and would return true or false. To go around this, is to simply make another function that would say:
PHP Code:
function is_licenseced() { return true; } 
Once you done that, it can be hacked again. The most logic way to protect your program, is to encrypt it with Zend, and make sure you upload the CMS/program on a webserver that has a Zend module installed. You can't read it, but Zend can convert it.

One way or the other, scriptkiddies always find a way around it. Just make sure you protect it from the avarage joe.
__________________
"Life is a bitch, take that bitch on a ride"
Send a message via MSN to ReSpawN
ReSpawN is offline  
Reply With Quote
Old 10-15-2008, 08:55 AM   #3 (permalink)
The Prestige
Advanced Programmer Top Contributor Good Samaritan 
 
sketchMedia's Avatar
 
Join Date: Oct 2007
Location: Manchester, UK
Posts: 854
Thanks: 32
sketchMedia is on a distinguished road
Default

Best way to do this is to obfuscate your source files.

IONCube:
PHP Encoder, protection, installer and performance tools from ionCube: ionCube PHP Encoder

Zend Guard:
Zend Guard - Protect Your IP & Generate More Revenue - Zend.com

Those two are what most people use, although they are quite expensive. There is however a free alternative:
Free PHP Encoder - Free PHP Code Encryption and Obfuscation Service!

Don't know how good it is or indeed how secure it is, but it should stop most of the muppets.
__________________
mysql> SELECT * FROM `users` WHERE `users`.`clue` > 0;
Empty set (0.00 sec)
sketchMedia is offline  
Reply With Quote
Old 10-17-2008, 08:30 PM   #4 (permalink)
The Wanderer
 
Join Date: Jul 2008
Posts: 8
Thanks: 1
Stealth is on a distinguished road
Default

Here is a way you could it.
Example:
Code:
<?php
$c = base64_decode('Q29weXJpZ2h0IE15IFNpdGU=');
echo $c;
?>
Result:
Copyright My Site

You use something like this - Link

to encode your text into Base64 and replace 'Q29weXJpZ2h0IE15IFNpdGU=' with your Base64 code encrypted using Base64 Encode option, and PHP will decode it with the base64_decode function. The user does not see what the value of it is because it is already encrypted, and you don't use the base64_encode function to display the value. Then you just echo $c or whatever your string name is in the footer or where you want the copyright.
Stealth is offline  
Reply With Quote
The Following User Says Thank You to Stealth For This Useful Post:
codefreek (10-23-2008)
Old 10-17-2008, 08:38 PM   #5 (permalink)
The Frequenter
 
ReSpawN's Avatar
 
Join Date: Nov 2007
Location: Netherlands
Posts: 460
Thanks: 49
ReSpawN is on a distinguished road
Default

That's the first thing I do when I search for encrypted copyrights.
__________________
"Life is a bitch, take that bitch on a ride"
Send a message via MSN to ReSpawN
ReSpawN is offline  
Reply With Quote
Old 10-17-2008, 08:52 PM   #6 (permalink)
The Wanderer
 
Join Date: Jul 2008
Posts: 8
Thanks: 1
Stealth is on a distinguished road
Default

Quote:
Originally Posted by ReSpawN View Post
That's the first thing I do when I search for encrypted copyrights.
Well...you could hide a file with the base64 copyright and name it something not obvious and include it into a common.php file which you include in all your files and echo $c or your string name to show the copyright. That would be kinda hard to to find and free. Compared to paying for Zend or ionCube.
Stealth is offline  
Reply With Quote
Old 10-24-2008, 12:39 AM   #7 (permalink)
Super Moderator
Inquisitive 
 
codefreek's Avatar
 
Join Date: Sep 2007
Location: Near you.
Posts: 791
Thanks: 241
codefreek is on a distinguished road
Default

can't you maybe do like this and now i am just thinking out with no regards to true life and fantasi :P

you make a script hum called like test.php
then you do maybe a other script called encrypt.php
and then in the encrypt you do include and then you do sha1/md5 on the include some how :P hihi :) just a thought
codefreek is offline  
Reply With Quote
Old 12-09-2008, 04:52 AM   #8 (permalink)
The Contributor
 
Join Date: Feb 2007
Posts: 64
Thanks: 9
Killswitch is on a distinguished road
Default

I've seen people base64 encode their code and copyright notices, but if someone wants it bad enough they will get it. Your average Joe will have no idea they can just write a script to decode the code and just modify that into the current script, removing the copyright notice from the encoding, but is it worth it?

If someone has to go through those lengths, then so be it, they will and it will find its way to the Warez forums. Regardless, these are people that probably wouldnt pay anyways. Best to do it is to create information about the domain for each paying client, and when you find a site using your script, check your database for the license. Contact their ISP if using a warez script.

Or, if you wanna be really sneaky and dirty, and I don't know whether this would be a good idea or not ( though it would be funny and possibly teach them a lesson ), create a 'nulled' version of your script and write an exploit into it that wouldnt exist in the original. Catch someone using it and drop their site, making sure you can leave them a nice little message not to use nulled scripts. Would be embrassing for them to have their visitors see that.
Killswitch is offline  
Reply With Quote
Old 01-11-2009, 04:40 PM   #9 (permalink)
The Visitor
 
Join Date: Jan 2009
Posts: 2
Thanks: 1
ahsanmani is on a distinguished road
Default

nice help..... for me too

though i used PHPLockIt in one of my project in such position.
ahsanmani is offline  
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT. The time now is 03:13 PM.

 
     

Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.1.0
Inactive Reminders By Icora Web Design