How to Null and Activate Premium WordPress Themes and Plugins [Valuable info]

  • Thread starter Thread starter Deleted member 752298
  • Start date Start date
That's easy method
Thanks for the share
waiting for more plugins and themes
 
Respected @Festinger

Can you crack this Wordpress Plugin.

https://servmask.com/products/url-extension

Tagging @zilog357 :)

Wow man, thank you a lot mate!
This gave me pretty good insight on how not to code a licensing system :p

Well, Thank you so much in Advance if it works :D

Great stuff I'm Following

That's easy method
Thanks for the share
waiting for more plugins and themes

following man. The yoast worked for me

You're welcome guys! :D
 
Thanks a lot ! You make life much easier and less frustrating mate
 
Great thread, just a bit of insight for those who may be attempting to do it themself.

To null a plugin/theme/program what you need to do is reverse engineer the licensing mechanism. So as you've seen in the first post, Fest first locates where yoast does its check to see if you are a premium user or not.

In this case,

PHP:
$license_status = $this->get_option( 'status' );
return trim( $license_status );

That line checks to see if the license status is valid or invalid, the returns the result. The returned result then determines what you can do or can't do.

Simply ensuring that you return 'valid' all the time will allow you to have access to premium features as the coding now ensures that your license status is 'valid'.


For plugins which require update or interact with a server, this might be a bit harder. Some plugins will require you have a paid version to see what information a server will respond with so you can create a small emulation.

Example from Fest once again

PHP:
$raw_response = wp_remote_get( ‘https://api.envato.com/v3/market/author/sale?code=’ . $tf_purchase_code, $prepare_request );
if ( ! is_wp_error( $raw_response ) ) {
$response = wp_remote_retrieve_body( $raw_response );
$response = json_decode( $response, true );
}

Rehub checks with envato to see if you have a valid purchase code. If you do, envato will prepare an appropriate response with license details allowing you to use the plugin. This information is stored in the variable "$response".

To null this, you would need to actually have a valid license(to make it easy). You would have to intercept the response that envato sends when the plugin makes that http request. Easiest way to see the response? Open chrome, open developer mode, go to the networks tab, the navigate to the url with a valid purchase code. You would then get the json response indicating what a valid license look like.

In the plugin, you would place code to simply emulate that response. As is seen here:

PHP:
$response = array();
$response['buyer'] = $tf_username;
$response['supported_until'] = date('Y-m-d',strtotime(date("Y-m-d", mktime()) . " + 365 day"));

Regarding updates and information directly from servers, you cannot circumvent this, as it requires you to ask the person for the item. Meaning, if we have a secret club which has a special book that we add 1 page to each week, you may be able to steal a book but if you ever want the new page, you'll have to come directly to the secret club to ask for the update. We will notice that your book is a stolen copy and we will deny you the new update.

Hope it helps someone.. Anyone :)
 
Hello @Ricx

Nice write up.

Only this part:

"To null this, you would need to actually have a valid license(to make it easy). You would have to intercept the response that envato sends when the plugin makes that http request. Easiest way to see the response? Open chrome, open developer mode, go to the networks tab, the navigate to the url with a valid purchase code. You would then get the json response indicating what a valid license look like."

Unfortunately, the author's server will not send the format you are looking for unless you send a valid license in your request. So this part will be good if you have a valid license and use the format for maybe other products from the same seller because every product's JSON response is different even among products of the same seller.

But you are right, instead of that paragraph, if you keep reverse engineering the code, you will see further in the script what responses the script expects without the need of monitoring the response from the seller's server.

Welcome to the group. Good to know that there is someone else that may help to reply request of nulling scripts. Don't go away bro.
 
My bad. You already stated "valid license" at the beginning of the paragraph. You see? Not even much time to read, lol
 
once you null yoast and make it premium, can you continue to update it on regular basis and remain a premium user? or do you need to do the null exercise every time you update?

Its need to do every time. When you click for update, all code will be replaced with new updated code
 
Its need to do every time. When you click for update, all code will be replaced with new updated code

Yes, it must be done for every update. I don't know Yoast, but most plugins will not update if there is no valid license, so trying to update will simply not do anything in most cases, but will give an error message about unable to update and your plugin will be safe.

In the very few plugins that update without a valid license, yes, your activation will be taken off when the new files replace the old "activated" files.

That is why I like to take off any call home or requests for updates or verification of current version. Nothing that calls the author's server is good to leave like that. It will also save resources and server's processing power, leaving more performance for site speed. I mean, probably you will save only a few milliseconds without those functions, right? But when it comes to my case, using 40+ plugins, the difference really adds up, lol.
 

Sorry, I am not allowed to answer questions about the WordPress Vault in this thread. :)

Hey @Festinger , Great stuff mate, You you have any idea how to null AAWP - Amazon Affiliate WordPress Plugin?

I will check it when I am back home (after the 14th of June). :)

Thanks a lot ! You make life much easier and less frustrating mate

You're welcome man.

Great thread, just a bit of insight for those who may be attempting to do it themself.

To null a plugin/theme/program what you need to do is reverse engineer the licensing mechanism. So as you've seen in the first post, Fest first locates where yoast does its check to see if you are a premium user or not.

In this case,

PHP:
$license_status = $this->get_option( 'status' );
return trim( $license_status );

That line checks to see if the license status is valid or invalid, the returns the result. The returned result then determines what you can do or can't do.

Simply ensuring that you return 'valid' all the time will allow you to have access to premium features as the coding now ensures that your license status is 'valid'.


For plugins which require update or interact with a server, this might be a bit harder. Some plugins will require you have a paid version to see what information a server will respond with so you can create a small emulation.

Example from Fest once again

PHP:
$raw_response = wp_remote_get( ‘https://api.envato.com/v3/market/author/sale?code=’ . $tf_purchase_code, $prepare_request );
if ( ! is_wp_error( $raw_response ) ) {
$response = wp_remote_retrieve_body( $raw_response );
$response = json_decode( $response, true );
}

Rehub checks with envato to see if you have a valid purchase code. If you do, envato will prepare an appropriate response with license details allowing you to use the plugin. This information is stored in the variable "$response".

To null this, you would need to actually have a valid license(to make it easy). You would have to intercept the response that envato sends when the plugin makes that http request. Easiest way to see the response? Open chrome, open developer mode, go to the networks tab, the navigate to the url with a valid purchase code. You would then get the json response indicating what a valid license look like.

In the plugin, you would place code to simply emulate that response. As is seen here:

PHP:
$response = array();
$response['buyer'] = $tf_username;
$response['supported_until'] = date('Y-m-d',strtotime(date("Y-m-d", mktime()) . " + 365 day"));

Regarding updates and information directly from servers, you cannot circumvent this, as it requires you to ask the person for the item. Meaning, if we have a secret club which has a special book that we add 1 page to each week, you may be able to steal a book but if you ever want the new page, you'll have to come directly to the secret club to ask for the update. We will notice that your book is a stolen copy and we will deny you the new update.

Hope it helps someone.. Anyone :)

Thanks a lot for your contribution and insights! Keep it going :D
 
Hi @zilog357 hope you're doing well could u please help with this "theia post slider for Wordpress plugin" link https://wecodepixels.com/ sorry can't add links
 
Back
Top