Creating Setup for the system build in scriptcase and ssl security

Hello,

what I want is to protect my codes and to make sure the client pay for using my system (exactly what scriptcase does), is there a way of creating a setup for my system so that when a person is installing it or wanna register I activate the product for him? and how can integrate ssl security for the system?

To protect your code you need a third party product, i.e. from NuSPhere or Zend. SSL security is just a matter of using the correct url’s. You need some kind of webservice or rest service to connect to, to do your registration stuf.

Does Nusphere or zend make it impossible to people to consult and edit my code(the system code)?
what do you mean that ssl is just a matter of using the correct url’s
For registration I understand but which tools can I use to create a setup so that the deployement be like the one that I did with scriptcase(easy and great:I like scriptcase!!!)

[QUOTE=magezi;39190]Hello,

what I want is to protect my codes and to make sure the client pay for using my system (exactly what scriptcase does), is there a way of creating a setup for my system so that when a person is installing it or wanna register I activate the product for him? and how can integrate ssl security for the system?[/QUOTE]
You fan create your own license system, and encruypt all. We are looking into sourceguardian

Giu, if you succeed on testing SourceGuardian can you share the process of encoding your apps. I was testing it, ran SourceGuardian, encoding all php and html files, leaving the _lib directory just copied not encoded because it presented several errors. After encoding I tried to run the encoded apps but they didn?t work. I will try again as soon I have an extension of the trial version.

regards.

I tested some months ago. It worked correctly. Did you enabled sourguardian extension in your deployed application machine?

Is that sourceguarduan strong enough(does it do encryption and obfuscation)? how to enabled the sourguardian in the deployed application and what about the environnement where the project is going to be deployed no configuration is required?

Didn’t entered on details. I suppose do the same as nuCoder and Zend. Price is very competitive.

The obfuscation and encryption is reasonably well done. Most people will not be able to reverse engineer it.
You do need extra configuration.

[QUOTE=rr;39257]The obfuscation and encryption is reasonably well done. Most people will not be able to reverse engineer it.
You do need extra configuration.[/QUOTE]

what do you want to say by I need Extra configuration?

In order to use encryption you need to add some dll files to your php and update your php ini file. Otherwise encrypted php files are not read. It is pretty simple to do generally. But the details depend on the protection mechanism you buy. Just check out the zend and nusphere and sourceguardian manuals. The details are there.

On my understand of these tools(zend,sourceguardian,nusphere coder) they don’t produce a setup but what if I wanna protect the script of my application database?

For example if the system is to be sold on internet and I wanna protect the database script

If you want that then you need to protect your deployed code (e.g. using zend encoder or the thing from nusphere or so).
Then install the php extension on the deployment server, restart the server and upload the encoded zend files to the proper locations.
Basically that is it.

Hello thank you so much for your guidance; still looking for Ideas because the application will be sold on internet now the problem is it is using a database what I really wanted was to have a complete protection of the database and the php application as what i saw with scriptcase setup(you just run the setup and everything is there)

How do you plan to sell your app. SaaS on your server? or a zip to customers installs on his own servers?

At last I could test it but had to leave out the _lib folder because it gave some problems when encoding. Could you encode including this folder? As you say the price is good and besides the obfuscation what I like is I can relate the installation to a MAC address or domain in order to prevent code stealing. In the object machine you have to install the corresponding loader (translator). Without it it doesn?t run.

I havent tested it, I guess you can encode all the php files in the _lib dir. Tho I see no real reason to do that. The code in there is mainly open source anyway (except a few dirs).

AFAIR When I tried sourceguardian, I encoded all deployed files, _lib included, and worked.
Why you want encode _lib? All inside this folder are external libraries, and your application logic is inside your apps. Is not needed IMHO

Just a silly question to fulfill my curiosity.
Does it need to be local? Can your system be online? Or do the core processing online?

PS: Sorry if you said something about it i havent read the whole thread.

Sourceguardian works like all the others. It requires loaders to be installed on your webserver. It is pretty simple work tho…