PHP Code Encryption Optimization or Obfuscation

When you want to hide your code from people who may steal it, but you still want to release your script so that other people can use it, there are several main techniques you can use.

There’s the Zend Optimizer, IonCube / Loader, and then there’s simple obfuscation or encryption within your code. I’ve used the easiest and most compatible method of the last concept, with reasonably good success - at least for my tastes, considering that the script was really not a big deal.

However, while I knew the “encryption” is not unbreakable, I had little or no idea as to how you could actually go about reverse engineering this code such that you could view the source.

Then I got this email:

I repalced eval with echo htmlentities and source code
was available - and I thought I dont have to mail you
at all !

You might not understand what this means, but to me: it’s quite interesting.

OK, here’s another, clearer explanation / version:

I replaced yoru eval() function with print() and printed the source of your code onto the page. Heh. thanks anyways!

D’oh! Maybe it’s not as good as I’d imagined.

» I munch C code for breakfast
» There are some amazing hackers out there
» Summer of Code Status Updates
» WordPress Amazon Code Stripped Out
» Stopping Fraudulent Spam with SPF

Leave a Message

1 Message

You should think to a real obfuscator like the one from semantic design or Obfusc (obfusc.com) They replace user indetifiers with nonsense names. It isharder to do corectly but is not reversible as with encoderes.
An aditional encoder as you used is good too,but offer little protection for somebody that is dedicated to see your code :)
I recomand Obfusc, it is my tool and i’m produd of it:)

 

RSS feed for comments on this post. TrackBack URI

Leave a Message