Free PHP script encoder

[bgardner333]

I am writing a free (public domain --- no license) PHP script encoder
similar to CodeLock. It's called FreeLock.
I was wondering how many of you would be interested in something like this,
and if so, what features would you like to see supported?

Here is an example of an encrypted script :

<?php $use_zlib='y'; $script_name="test2.php"; if(!file_exists('freelock.php')) {
 echo "freelock not found - exiting"; exit; } 
$s1="4+vktC7iv1aQss0UmvkY5Uucaa==";
 include_once('freelock.php'); freelock_run($s1); ?>

I am looking for input to make this really useful...
If SourceForge approves my project, it will be on there soon.

Thanks in advance for your input!

[bigduke]

I would really like to have this, all i need is uncrackable php code encryption/decryption. The Zend encoder and all others seem unaffordable at the moment.

[fulat2k]

Very cool project. Would definitely be interested in this!

[warmers]

Current encryption services are way out of my reach as well.

Love to hear more about your project.

[bgardner333]

The project was approved by sourceforge, so it will be up there in a day or two.
Just go to sourceforge and search for "FreeLock"

Current features :
-Limit script to ONE IP address OR one hostname
-Include files are supported
-Two different encryption/scrambling modes
-Crude interface
-Support for compressed scripts (using ZLib - available on most systems)
-Since it is open source, you can create your own encrypt/decrypt functions

If there are more features, please let me know
bgardner333@yahoo.com

[bgardner333]

I would really like to have this, all i need is uncrackable php code encryption/decryption. The Zend encoder and all others seem unaffordable at the moment.

Nothing is uncrackable, but you can make it very difficult.
In the legal sense (if you are distributing commercial software) it would prove that the user had to have intent to modify/re-distribute your script (the cannot plead ignorance)

But since each program encrypted by freelock can use a different scheme, it will make it that much harder to figure out.

[cfm]

Looking forward to seeing it.

[godsfshrmn]

How/what exactly does this script do?

[bgardner333]

How/what exactly does this script do?

It makes your scripts safe from editing, and optionally can limit the use of the
script to ONE host/IP address.

It does this by encrypting/scrambling the script, then (optionally) compressing it, then encoding it to base64

this script

<?php
echo "This is an unprotected script.";
?>

Looks like this after you run freelock on it :

<?php $use_zlib='y'; if(!file_exists('freelock.php')) { echo "freelock not found - 
exiting"; exit; } 
$s1="Ny3nsSnafix3GBZdArhgqVebgRuegUJgh9lOrIrmmLpNqP07tg7auxX3q7TWO5Vc
Hqp3/hY0V7XOD1x9xnuV6QtTFxLxQvFmBQduaL+WVwoOj69hCrZP0XR0hnimQXvuC
Bl/gzNCd5icc9aFOhkZQC8hBzVMSD0+7jPFZdEU18gfpdTg542JaDnPHimMJ6gpfoqkkh
3Q2ct02UoDdE0tsmarHGAj1i1IP8CsEAA9GtGBRrRGwrZ5nYqEJ03d0b2pmKxNrz6TB38
a"; include_once('freelock.php'); freelock_run($s1); ?>

All you need to distribute with your script is freelock.php (which is also encoded)

Does that help?

[sputza]

This is a great idea. Keep up the good work!

Cant wait to use it!

[bgardner333]

Ok, it's up on sourceforge now.
Just go to http://freelock.sourceforge.net

[joshg678]

im tried to download it, but it dosent work.

Zip file is missing 6 bytes of data....

From every mirror i try

[bigduke]

Nothing is uncrackable, but you can make it very difficult.
In the legal sense (if you are distributing commercial software) it would prove that the user had to have intent to modify/re-distribute your script (the cannot plead ignorance)

But since each program encrypted by freelock can use a different scheme, it will make it that much harder to figure out.

My current work goes out unprotected, so open source GPL taken for granted without the paper work, however your project will help in delivering an as-is work.

[bgardner333]

im tried to download it, but it dosent work.

Zip file is missing 6 bytes of data....

From every mirror i try

I accidentally uploaded the file in ASCII mode, so it corrupted the ZIP.
It is now fixed.
I apologize for the inconvenience!

[joshg678]

allright cool.

Works now.

[colinr]

i don't like the idea... kinda against the whole OSS philosophy isn't it?

use other people's freely given time and effort (and money) [apache, php, mysql, etc, etc] to write a script and then set up a system where you control who can use it or not....

I wonder where we would all be if apache/php/mysql used that same thinking....

secondly, if someone buys a php script package from you, why not let them tailor it to their needs?

Not that I think you are a bad person er something. just think its kinda hypocritical to make an open-source [its on sourceforge right] program that is built to make other programs (or scripts, etc) closed-source...

[bgardner333]

i don't like the idea... kinda against the whole OSS philosophy isn't it?

use other people's freely given time and effort (and money) [apache, php, mysql, etc, etc] to write a script and then set up a system where you control who can use it or not....

I wonder where we would all be if apache/php/mysql used that same thinking....

secondly, if someone buys a php script package from you, why not let them tailor it to their needs?

Not that I think you are a bad person er something. just think its kinda hypocritical to make an open-source [its on sourceforge right] program that is built to make other programs (or scripts, etc) closed-source...

I thought about that when I was writing it. But since even people like me
who enjoy free or open source software need to make money, and would like to do so with PHP without getting ripped off, I thought this might be useful.

Besides, there are already commercial versions of this, so I figured might as well
have an open source one that can fill in for it (and if people actually contribute,
it will be much better than the aforementioned commercial/closed source options)

All in all, there are some cases where it really is necessary to maintain a closed
source policy. For those times, there's FreeLock.

Wow, I talk a lot

[bgardner333]

allright cool.

Works now.

I know it's still pretty crude, but I have 3 jobs so I don't have TOO much free time.

Let me know what you think about it!

[xmitchx]

I'll be waiting for a later version that is possibly more secure and then I may start using it

[bgardner333]

I'll be waiting for a later version that is possibly more secure and then I may start using it

That will be coming sooner than you think!
I am making improvements constantly, and will soon be ready for production use.

[louism]

Hi bgardner333,
I just read through your script quickly and saw you had the expiry date to do. Here's what I thought :
Encrypt your file then take the md5 of the file, substr it to fit the key lenght and use it as a SALT to encrypt the date.

[bgardner333]

Hi bgardner333,
I just read through your script quickly and saw you had the expiry date to do. Here's what I thought :
Encrypt your file then take the md5 of the file, substr it to fit the key lenght and use it as a SALT to encrypt the date.

Thanks for the input!
If I use that, I'll definately credit you!

[Daijoubu]

That's going to add lots of overhead :|
Just stick to mmcache/ioncube encoder...

[xmitchx]

The problem is that it costs over 200 dollars for the simplest one

[astericks]

hey brian, i took a look at it. nice script man.

your addbytes() fn, I made one just like that to encode values being written to cookies

Again, nice script...As Daijobu mentioned, it's gonna create quite some overhead, encoding one char by one. let's see where it goes from here.

Good luck