A good PHP encoder/encrypter

B

blackhaze

Power Member
Joined
Jan 11, 2008
Messages
661
Reaction score
168
I am a coder and i just wrote a new PHP app, so i was looking at Zend, IonCube, CodeLock and the usual to protect my "stuff".

I can decode some of them myself, some apps i really ask myself how retarded the encryption must be (Code Lock :) ) if i can decode it myself without even using a 3rd party tool.

I find a pretty "ok" one which is called "Source Lock"..."ok" since i already tried to decrypt one of the files myself and couldnt do it.

It also supports locking by IP/domain (which i needed)...and it is only EU59, extremely easy to use. I am not related to them, but check it out if you look for a good PHP enrypter which is AFFORDABLE. (not hundreds of $$$ like Zend which every 5 year haxor can encrypt already :)

sourcelock.biz

The only problem i had with them it took them a few hours to process my order, but i am REALLY satisfied with this thing for not even 60 bucks!
 
Last edited:
Advertise on BHW
licensed or something you can upload here?
 
Hi,

I've been using pkp Lock-It

hxxp://www.PhpLockIt.com

Anyone had experience with it?

Around $50 and works - but not sure how crackable it is

Cheers

Ronin
 
Hi Sweetfunny,

Just archived a file and uploaded it - PM'd you url

Thanks

Ronin
 
Sweetfunny cracked the code and sent me info on the app.

I thought this was a cheap replacement for Zend as I need to encode an app to deploy on a wide variety of small, shared hosting servers and this worked

Thanks to Sweetfunny for the warning before I went any further

Guess I have to check out ioncube?

Ronin
 
Yes all they do is use a base64 variation, so all these runtime ones like Byterun, SourceCop, CodeLock, TrueBug etc can be decoded very easily. Same with Zend, you can decode a full folder of encrypted files in under a minute.. probably faster than what it took to encrypt them.

Ioncube is a different story, only a handful of people can decode it.
 
HAHA

Look,

i decoded codelock and crap like this myself already, but i say that this for $59 was "pretty good", i dont say its perfect...but it feed my needs to protect from "avg" kindergarten hackers.


Hey i am sending you an example and i want to see whether you can decode it.

Here, have fun:

Code: 
<?php
#####
# Source code has been protected with SourceLock.
# Any attempt to reverse-engineer, debug or modify this
# file is strictly forbidden and will be prosecuted by law.
#####
# SourceLock Pro - Licensed full version
# http://sourcelock.biz
@sourcelock_2_00;
if(!function_exists('gzinflate')){ die('<html><head><title>SourceLock Runtime Error</title></head><body><div style="margin: auto; max-width: 500px; min-height: 50px; background: #d8e5e6; color: #141424; font-family: Arial, Terminal, sans-serif; font-size: 14px; border: 1px solid #738091;"><b>The SourceLock runtime engine returns following error:</b><br /><center>ZLIB module not installed on server!</center></div></body></html>'); }
$slk_evc='n3vB5b+MGhaEJK9CrTbL1iWzPDEb5DUmr3uqr7DP4lLB5h/m7M/Swljj47meWWZN46H2lNH21NaVKinzWqzuaDmb4MmbuiZNw3nqaWnculv/rTnz7CvS1injP7vovlO/riOhlP+S1ZabuiOl1PUZK8kjPDXbriUQWCWuahzflxxt1lDQ1PGS1FOC7x/H58ecXNDQuixCKlvH5iUm5QHM1NH6KCDMXDH/rixn1ixCKZvBrPvQa3GnabueP7vKwPWQlPGMWie04iabllZNWCDuabneulv/rTnz7Cvn/3Gk7hUsXiD8GFOvW8ZbK6kVKixQ1PGn1F1i4WGjrTxQl=Hu16G6KZabX8O/riUQaNH21lvHuiDQ1PGn1ixsKPbjGDZfGTGaW8xcuxLS5h/mKM/S1bubP7n65iz=GFLo5hzflxxt1lDQ1PGn1ixCKlv/5FWmlCGa57H6KZvSXFmf7Cnu1NW/KlLT5h8fuFe2/P+g78aO5bUluFz2WbkbKbvNolvC1PGn1ixCKlvHuiUQrTbM1NH6K7vPwWZNlCDD1bxU4ZXe5h8fvTz2WbkjKl/6r8blK7Wn1NW/KZvAwxZN7MG1lP+HKlvHuiDQ1PGn1bxVPlvNG8bQ/7nJwMH21lvHuiDQa7DQuixCKlvH5P/=lMxMrMWtKlLSaWkfoWvZWimjPWGorTxQ46ua/hLj7=UjPPv817uS1NLg78vMrZOQlPzDKxmbKbvNolvCa7DQuN8e1FG/5hu3G3uPK8ecPlaVGiZNWCDuabneulv/5hu3G3uPrWnNK7vKwPvmoPUD1bxcuZGiGDuzlCvSw7Es7CDsXZDc56n1lP+SPhbCGxU3W7/SK8kb4DGC5iZNw3nqaWn0P7nsX8DQ/=/v1FvUPWGMaWU3uNHvWFve7=UP5Zel77/JWxuzPW/WaWU0PhU5WiZb7hb55hxl46HalP+auDxtKZ8Nw3nqaWnVPDGCrZDealWv/QHcWxvB/xxQWhWuWb4VulXe5PW=XQx5/ixc4MnKrxDQa=u5/FOz4WGo5xUmr3uqrlxsPDGKaWZflMx5/iWgKbvNolvC5iuLKTOsulvsXDH/riehlP+HlDG5wTn3uFeawM1N7TDoaTvgoWvZWimjPWGorTxQ46u4aWUSW8WPlxEO46vSw=L4KCZi5iZNw3nqaWUV4ZGPGlUewxLSw=Gg4PeBGWUzwTL5KxutK7vjXhmOlhUMahGcuZGiGDu37M/nrlucuxGuax9OlhOuaMDsPDGC5iZNw3nqaWn0P7nsXiUe1MnKaiib4=DZubGerA+/r3vgWPzNrxDs1huSr8nWWhOMvWHeWCW/a6HBWFbTrldfKhzhaZZNlMHB/xDBXTevrCLJlMxPahu=X8v5rPLjPhOHaWL=oPe2lFzVKbvsXZi+nNBvAhDhSAxhGPeMGTDtrD+DwTDNG3akn6vB5b+ZXFaCSKZvACBvAhubrhvi5P+gm3vB5b+ZXFakn3viXqZvACBvAEDhr6mknTZ+aQBZ57ONG3nBuPjkn3viXqZRnTZsSfZvAEDRQ1knAK/tXh1EJKHtXh1kX6WqX6/fSA/NG3mBnTZBaKZUoViSA1ZZ5TWjmQiES3viXhDgufDNGPnNG3mknN9VnfVV2QmzX6/frTWgS3viXCnDGqLZuPvku=EknT+fuAZUSKZguTWM5TWjSA/tXh1UoViSA1ZZ5TWjmQiEnNHjnfeNGPnNG3mknN9VnfVV2QmzX6/frTWgS3viXCnDGqEZ5TWjSKZU2CviXCnDGqEZ5TWjS7BvAEZnnT/LGT8E2MiE4FLfSTLDwT/D4fEZ5TWjSKZRQ1knp1iSA=nDG3WfrqEZuTxi4KZRQ1U+Q1U+Q1UDGhxBS3vB5b+ZXFak4hxNu74i=F/D4F+ZuKEZXFOs=FvF4fZUS7BY';$slk_dvc='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';$slk_file=__FILE__;eval(gzinflate(base64_decode($slk_dvc)));
return;?>
UlQxMjE2MjAwODA2MTgwNiIF1Fk2E0iAQDjBagD01gEqTWttAm3LkiogDG76xfknwcBJ7UFdFewHcvg+rg1L+VSpWYxIGfNPlATT4sd2Re12kdn4sA3g0ugUF0Kp2JIeAdHvFlwVQ7SMlgY9iu5Vy0gvYKMleJlWjzkji5Y+c9SyF3mMB1Bp6aWcWZdmlF8UuCCVtkZzisZ640SZkoz/A2y3ht0tBiQc4b9jGcG9mv23IH85TbeII2TKEMC1Ha23HkP1eVg3ddHr+m/C2kQ5nYdPM20a+ZVVHMsljHrCIYbrpq73KN3ZpUecjxkc7vVYQxEmTIs9rfTykxqiyqTp1SjB32d7OKYNZ38YcIRC30mvgeFo24g5uqhN6dcYzYGfdfz0n6mrj2kjRlut/YlVsV8CHj/Dm6VUfbg+sfrTmAPKU6yyz8UDOOr9AuOKutTVClqNeppUipCN21y0mooq6Q0CpI9d7jAEcK6HAjR7k9dEstodWZQ6A27AorrDd3N4p2NTzikhN7/lLPDQWoA7blLpJ0fnWyNKVpTgkyGlX39KZMBGQ9WVfK3j6KYI3xuySKFqmHBdC7AVNw+Kddh8w94WCpEGpEacnH9mnpM2jJGkMwKjUzrXfoQoO+oWIq03
 
Last edited:
silicon_ronin said:
Sweetfunny cracked the code and sent me info on the app.

I thought this was a cheap replacement for Zend as I need to encode an app to deploy on a wide variety of small, shared hosting servers and this worked

Thanks to Sweetfunny for the warning before I went any further

Guess I have to check out ioncube?

Ronin
Click to expand...

ioncube is on another level, it uses bytecode, there is not even a source LEFT anymore. So its difficult to compare against others. However, it is too fricking expensive for my taste.
I wonder how long he will take to decode the sourcelock code i pasted. I gave up since it required me to go through MANY, MANY loops of base64 decoding..so i considered it "ok" for $59, quite aware that nothing really can beat ioncube ATM.
 
PHP Bytecode back to PHP Source code is not impossible, there are even ways of going from x86 machine code back to working C source. Depends on how much obfuscation is applied to the bytecode.

PHP has support for reflection (accessing/modifying object/class data at runtime) so I'd imagine a clever person could use this to bypass essentially any protection mechanism. You can get around .NET and Java protection schemes using reflection too - it's a really cool feature but it makes writing secure applications for these platforms really hard.

That said, it's much more difficult than just getting a very slightly modified version of PHP to log the inputs to 'eval()' which all the non-bytecode solutions are defeated by.
 
Last edited:
blackhaze said:
ioncube is on another level, it uses bytecode, there is not even a source LEFT anymore. So its difficult to compare against others. However, it is too fricking expensive for my taste.
I wonder how long he will take to decode the sourcelock code i pasted. I gave up since it required me to go through MANY, MANY loops of base64 decoding..so i considered it "ok" for $59, quite aware that nothing really can beat ioncube ATM.
Click to expand...

Ioncube is not worth your time. It is so easy to decrypt that I find it no better protection than anything else out there, only you have to pay more for it.
 
Last edited by a moderator:
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Networking Downloads

Marketplace

Content / Copywriting Hosting Images, Logos & Videos Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design Misc

Making Money

Affiliate Programs Hire a Freelancer Making Money Pay Per Click Site Flipping

BlackHatWorld

BHW Merch Forum Suggestions & Feedback Introductions Lounge Dispute Resolution

Other

Domain Name Forum IM Journeys Web Hosting Newsletter
Back
Top