Solved

How to protect PHP source code?

Posted on 2009-05-07
12
469 Views
Last Modified: 2013-12-13
Hi there,

I am developing a web-based software with PHP. Right now, the software will be distributed and be installed in desktop computer. Since it's PHP based, when it's installed, the source code could be seen.
Do you have any idea how to secure or protec the source code, so when the software installed in server they couldn't see the source code? or are there any other ways to prevent this?
I know some good system like soureguardian and ioncube, but I wouldn't get them because their price is too high for me. I would appreciate any input.

Thanks
0
Comment
Question by:Edwat
  • 4
  • 3
  • 3
  • +1
12 Comments
 
LVL 14

Expert Comment

by:shobinsun
Comment Utility
Hi,

zend guard and ioncube PHP encoder are the best professional, enterprise class solutions available that have never been successfully reverse engineered ... yet.

http://www.zend.com/products/zend_guard/

http://www.ioncube.com/
0
 
LVL 4

Accepted Solution

by:
Andy1988 earned 350 total points
Comment Utility
You can use IonCube to protect/encrypt your PHP source code

http://www.ioncube.com/
0
 
LVL 14

Assisted Solution

by:shobinsun
shobinsun earned 150 total points
Comment Utility
Hi,

Also

There are a couple of ways to do that.

http://www.topshareware.com/SourceGuardian-PHP-Encoder-download-37083.htm  ( this is a commercial encoder )

 http://www.raizlabs.com/software/phpobfuscator/


Regards
0
 
LVL 36

Expert Comment

by:Loganathan Natarajan
Comment Utility
I searched in EE, lots found,

http://www.rssoftlab.com/

http://pobs.mywalhalla.net/

http://turck-mmcache.sourceforge.net/index_old.html

You can use any of these...

http://pobs.mywalhalla.net/
Encoder :
http://www.rssoftlab.com/main.php4
Screw:
http://sourceforge.net/projects/php-screw/

http://sourceguardian.com/

is another more proffessional application...

//Jan
http://www.ivtaco.com

You could obfucate your code which will make it harder to break (but not impossible).
Here's an example:
http://www.virtualpromote.com/tools/php-encrypt/


0
 

Author Comment

by:Edwat
Comment Utility
Guys, thanks for the input.

I mentioned earlier that sourguardian, ioncube and also zend guard fee is too high for me. Need other software that could protect the source code with lower fee..

btw, do they charge for each software license that I will distribute or it is a one time fee for the software to use? thanks
0
 
LVL 36

Expert Comment

by:Loganathan Natarajan
Comment Utility
I have listed few freewares please try those.
0
Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

 
LVL 4

Expert Comment

by:Andy1988
Comment Utility
No, just for the software :)
0
 
LVL 14

Expert Comment

by:shobinsun
Comment Utility
0
 

Author Comment

by:Edwat
Comment Utility
I just want to be sure..
so basically, ioncube or sourceguardian fee is just one time fee and after I buy their license I could encode and generate license for unlimited php script files?
0
 
LVL 4

Expert Comment

by:Andy1988
Comment Utility
Yeah, you can. You just need to invest $199 one time.
0
 
LVL 14

Expert Comment

by:shobinsun
Comment Utility
Hi.

Yes you are right.
0
 

Author Comment

by:Edwat
Comment Utility
ok great. thanks for your input.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Password hashing is better than message digests or encryption, and you should be using it instead of message digests or encryption.  Find out why and how in this article, which supplements the original article on PHP Client Registration, Login, Logo…
Nothing in an HTTP request can be trusted, including HTTP headers and form data.  A form token is a tool that can be used to guard against request forgeries (CSRF).  This article shows an improved approach to form tokens, making it more difficult to…
Learn how to match and substitute tagged data using PHP regular expressions. Demonstrated on Windows 7, but also applies to other operating systems. Demonstrated technique applies to PHP (all versions) and Firefox, but very similar techniques will w…
Explain concepts important to validation of email addresses with regular expressions. Applies to most languages/tools that uses regular expressions. Consider email address RFCs: Look at HTML5 form input element (with type=email) regex pattern: T…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now