1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

A good PHP encoder/encrypter

Discussion in 'PHP & Perl' started by blackhaze, Dec 3, 2008.

  1. blackhaze

    blackhaze Power Member

    Joined:
    Jan 11, 2008
    Messages:
    661
    Likes Received:
    167
    Occupation:
    self made millionaire
    Location:
    in the matrix
    Home Page:
    I am a coder and i just wrote a new PHP app, so i was looking at Zend, IonCube, CodeLock and the usual to protect my "stuff".

    I can decode some of them myself, some apps i really ask myself how retarded the encryption must be (Code Lock :) ) if i can decode it myself without even using a 3rd party tool.

    I find a pretty "ok" one which is called "Source Lock"..."ok" since i already tried to decrypt one of the files myself and couldnt do it.

    It also supports locking by IP/domain (which i needed)...and it is only EU59, extremely easy to use. I am not related to them, but check it out if you look for a good PHP enrypter which is AFFORDABLE. (not hundreds of $$$ like Zend which every 5 year haxor can encrypt already :)

    sourcelock.biz

    The only problem i had with them it took them a few hours to process my order, but i am REALLY satisfied with this thing for not even 60 bucks!
     
    Last edited: Dec 3, 2008
  2. neta1o

    neta1o Regular Member

    Joined:
    Sep 29, 2008
    Messages:
    388
    Likes Received:
    318
    Home Page:
    licensed or something you can upload here?
     
  3. blackhaze

    blackhaze Power Member

    Joined:
    Jan 11, 2008
    Messages:
    661
    Likes Received:
    167
    Occupation:
    self made millionaire
    Location:
    in the matrix
    Home Page:
    uhm...i actually really paid for it. EU59== nobrainer
     
  4. madbobo

    madbobo Newbie

    Joined:
    Jan 6, 2008
    Messages:
    16
    Likes Received:
    0
    hi, i need to decode some codelock files. can you explain how?
     
  5. gejohn

    gejohn Junior Member

    Joined:
    May 7, 2008
    Messages:
    165
    Likes Received:
    20
    Occupation:
    Promoting ad
    Location:
    ->y!m jowis5459
    can IonCube decode?..any article about this?
     
  6. Sweetfunny

    Sweetfunny Jr. VIP Jr. VIP Premium Member

    Joined:
    Jul 13, 2008
    Messages:
    1,747
    Likes Received:
    5,039
    Location:
    ScrapeBox v2.0
    Home Page:
    Actually it's a waste of money, crackable in 1 minute. Anything that works at runtime like that is simple to undo.

    Ioncube is the only real challenge.
     
  7. gejohn

    gejohn Junior Member

    Joined:
    May 7, 2008
    Messages:
    165
    Likes Received:
    20
    Occupation:
    Promoting ad
    Location:
    ->y!m jowis5459
    yea..i try many metholds ,..can't decode.
     
  8. silicon_ronin

    silicon_ronin Registered Member

    Joined:
    Dec 14, 2008
    Messages:
    60
    Likes Received:
    45
    Occupation:
    Ronin
    Location:
    Tropical island in Asia
    Home Page:
    Hi,

    I've been using pkp Lock-It

    hxxp://www.PhpLockIt.com

    Anyone had experience with it?

    Around $50 and works - but not sure how crackable it is

    Cheers

    Ronin
     
  9. Sweetfunny

    Sweetfunny Jr. VIP Jr. VIP Premium Member

    Joined:
    Jul 13, 2008
    Messages:
    1,747
    Likes Received:
    5,039
    Location:
    ScrapeBox v2.0
    Home Page:
    Send me a file using it and i will see. ;)
     
    • Thanks Thanks x 1
  10. silicon_ronin

    silicon_ronin Registered Member

    Joined:
    Dec 14, 2008
    Messages:
    60
    Likes Received:
    45
    Occupation:
    Ronin
    Location:
    Tropical island in Asia
    Home Page:
    Hi Sweetfunny,

    Just archived a file and uploaded it - PM'd you url

    Thanks

    Ronin
     
  11. silicon_ronin

    silicon_ronin Registered Member

    Joined:
    Dec 14, 2008
    Messages:
    60
    Likes Received:
    45
    Occupation:
    Ronin
    Location:
    Tropical island in Asia
    Home Page:
    Sweetfunny cracked the code and sent me info on the app.

    I thought this was a cheap replacement for Zend as I need to encode an app to deploy on a wide variety of small, shared hosting servers and this worked

    Thanks to Sweetfunny for the warning before I went any further

    Guess I have to check out ioncube?

    Ronin
     
  12. Sweetfunny

    Sweetfunny Jr. VIP Jr. VIP Premium Member

    Joined:
    Jul 13, 2008
    Messages:
    1,747
    Likes Received:
    5,039
    Location:
    ScrapeBox v2.0
    Home Page:
    Yes all they do is use a base64 variation, so all these runtime ones like Byterun, SourceCop, CodeLock, TrueBug etc can be decoded very easily. Same with Zend, you can decode a full folder of encrypted files in under a minute.. probably faster than what it took to encrypt them.

    Ioncube is a different story, only a handful of people can decode it.
     
    • Thanks Thanks x 1
  13. blackhaze

    blackhaze Power Member

    Joined:
    Jan 11, 2008
    Messages:
    661
    Likes Received:
    167
    Occupation:
    self made millionaire
    Location:
    in the matrix
    Home Page:
    HAHA

    Look,

    i decoded codelock and crap like this myself already, but i say that this for $59 was "pretty good", i dont say its perfect...but it feed my needs to protect from "avg" kindergarten hackers.


    Hey i am sending you an example and i want to see whether you can decode it.

    Here, have fun:

    Code:
    <?php
    #####
    # Source code has been protected with SourceLock.
    # Any attempt to reverse-engineer, debug or modify this
    # file is strictly forbidden and will be prosecuted by law.
    #####
    # SourceLock Pro - Licensed full version
    # http://sourcelock.biz
    @sourcelock_2_00;
    if(!function_exists('gzinflate')){ die('<html><head><title>SourceLock Runtime Error</title></head><body><div style="margin: auto; max-width: 500px; min-height: 50px; background: #d8e5e6; color: #141424; font-family: Arial, Terminal, sans-serif; font-size: 14px; border: 1px solid #738091;"><b>The SourceLock runtime engine returns following error:</b><br /><center>ZLIB module not installed on server!</center></div></body></html>'); }
    $slk_evc='n3vB5b+MGhaEJK9CrTbL1iWzPDEb5DUmr3uqr7DP4lLB5h/m7M/Swljj47meWWZN46H2lNH21NaVKinzWqzuaDmb4MmbuiZNw3nqaWnculv/rTnz7CvS1injP7vovlO/riOhlP+S1ZabuiOl1PUZK8kjPDXbriUQWCWuahzflxxt1lDQ1PGS1FOC7x/H58ecXNDQuixCKlvH5iUm5QHM1NH6KCDMXDH/rixn1ixCKZvBrPvQa3GnabueP7vKwPWQlPGMWie04iabllZNWCDuabneulv/rTnz7Cvn/3Gk7hUsXiD8GFOvW8ZbK6kVKixQ1PGn1F1i4WGjrTxQl=Hu16G6KZabX8O/riUQaNH21lvHuiDQ1PGn1ixsKPbjGDZfGTGaW8xcuxLS5h/mKM/S1bubP7n65iz=GFLo5hzflxxt1lDQ1PGn1ixCKlv/5FWmlCGa57H6KZvSXFmf7Cnu1NW/KlLT5h8fuFe2/P+g78aO5bUluFz2WbkbKbvNolvC1PGn1ixCKlvHuiUQrTbM1NH6K7vPwWZNlCDD1bxU4ZXe5h8fvTz2WbkjKl/6r8blK7Wn1NW/KZvAwxZN7MG1lP+HKlvHuiDQ1PGn1bxVPlvNG8bQ/7nJwMH21lvHuiDQa7DQuixCKlvH5P/=lMxMrMWtKlLSaWkfoWvZWimjPWGorTxQ46ua/hLj7=UjPPv817uS1NLg78vMrZOQlPzDKxmbKbvNolvCa7DQuN8e1FG/5hu3G3uPK8ecPlaVGiZNWCDuabneulv/5hu3G3uPrWnNK7vKwPvmoPUD1bxcuZGiGDuzlCvSw7Es7CDsXZDc56n1lP+SPhbCGxU3W7/SK8kb4DGC5iZNw3nqaWn0P7nsX8DQ/=/v1FvUPWGMaWU3uNHvWFve7=UP5Zel77/JWxuzPW/WaWU0PhU5WiZb7hb55hxl46HalP+auDxtKZ8Nw3nqaWnVPDGCrZDealWv/QHcWxvB/xxQWhWuWb4VulXe5PW=XQx5/ixc4MnKrxDQa=u5/FOz4WGo5xUmr3uqrlxsPDGKaWZflMx5/iWgKbvNolvC5iuLKTOsulvsXDH/riehlP+HlDG5wTn3uFeawM1N7TDoaTvgoWvZWimjPWGorTxQ46u4aWUSW8WPlxEO46vSw=L4KCZi5iZNw3nqaWUV4ZGPGlUewxLSw=Gg4PeBGWUzwTL5KxutK7vjXhmOlhUMahGcuZGiGDu37M/nrlucuxGuax9OlhOuaMDsPDGC5iZNw3nqaWn0P7nsXiUe1MnKaiib4=DZubGerA+/r3vgWPzNrxDs1huSr8nWWhOMvWHeWCW/a6HBWFbTrldfKhzhaZZNlMHB/xDBXTevrCLJlMxPahu=X8v5rPLjPhOHaWL=oPe2lFzVKbvsXZi+nNBvAhDhSAxhGPeMGTDtrD+DwTDNG3akn6vB5b+ZXFaCSKZvACBvAhubrhvi5P+gm3vB5b+ZXFakn3viXqZvACBvAEDhr6mknTZ+aQBZ57ONG3nBuPjkn3viXqZRnTZsSfZvAEDRQ1knAK/tXh1EJKHtXh1kX6WqX6/fSA/NG3mBnTZBaKZUoViSA1ZZ5TWjmQiES3viXhDgufDNGPnNG3mknN9VnfVV2QmzX6/frTWgS3viXCnDGqLZuPvku=EknT+fuAZUSKZguTWM5TWjSA/tXh1UoViSA1ZZ5TWjmQiEnNHjnfeNGPnNG3mknN9VnfVV2QmzX6/frTWgS3viXCnDGqEZ5TWjSKZU2CviXCnDGqEZ5TWjS7BvAEZnnT/LGT8E2MiE4FLfSTLDwT/D4fEZ5TWjSKZRQ1knp1iSA=nDG3WfrqEZuTxi4KZRQ1U+Q1U+Q1UDGhxBS3vB5b+ZXFak4hxNu74i=F/D4F+ZuKEZXFOs=FvF4fZUS7BY';$slk_dvc='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';$slk_file=__FILE__;eval(gzinflate(base64_decode($slk_dvc)));
    return;?>
    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
    
     
    Last edited: Dec 16, 2008
  14. blackhaze

    blackhaze Power Member

    Joined:
    Jan 11, 2008
    Messages:
    661
    Likes Received:
    167
    Occupation:
    self made millionaire
    Location:
    in the matrix
    Home Page:
    ioncube is on another level, it uses bytecode, there is not even a source LEFT anymore. So its difficult to compare against others. However, it is too fricking expensive for my taste.
    I wonder how long he will take to decode the sourcelock code i pasted. I gave up since it required me to go through MANY, MANY loops of base64 decoding..so i considered it "ok" for $59, quite aware that nothing really can beat ioncube ATM.
     
  15. ampedsoftware

    ampedsoftware Newbie

    Joined:
    Dec 25, 2012
    Messages:
    26
    Likes Received:
    12
    PHP Bytecode back to PHP Source code is not impossible, there are even ways of going from x86 machine code back to working C source. Depends on how much obfuscation is applied to the bytecode.

    PHP has support for reflection (accessing/modifying object/class data at runtime) so I'd imagine a clever person could use this to bypass essentially any protection mechanism. You can get around .NET and Java protection schemes using reflection too - it's a really cool feature but it makes writing secure applications for these platforms really hard.

    That said, it's much more difficult than just getting a very slightly modified version of PHP to log the inputs to 'eval()' which all the non-bytecode solutions are defeated by.
     
    • Thanks Thanks x 1
    Last edited: Dec 25, 2012
  16. imalltiedup2

    imalltiedup2 Newbie

    Joined:
    Mar 28, 2012
    Messages:
    6
    Likes Received:
    0
    Ioncube is not worth your time. It is so easy to decrypt that I find it no better protection than anything else out there, only you have to pay more for it.
     
    Last edited by a moderator: Jan 15, 2013