base64_encode

NetworkTown.Net · 11-04-2006, 01:21 PM

well i have one question is base64_encode secure ? i want to make a install.php page where it checks if the site is licenced then it will contine but by encoding it will stop people from removing the check put and installing so do you think it is secure if i use it?

TwistMyArm · 11-04-2006, 02:39 PM

It is absolutely not secure. Your code still has to base64_decode it to run and there's no reason why the guy who runs the script can't do that himself. That is to say, take your base64_encode'd string, decode it himself then print it to screen or whatever.

If you want your script to be more secure, I would suggest using an encoder like ioncube and / or running an obfuscator over the code.

beaver6813 · 11-05-2006, 01:52 AM

Yup what he said

There is also Zend, and also a few other online services that will do all licensing for your script, check on google

You might also maybe want to use a callback feature, that way you would be able to encrypt a string using md5 then check it again when called back. This means that the customer wouldn't have access to the license decoder.

NetworkTown.Net · 11-05-2006, 07:48 AM

Thanks for the tips ill see what i can do.

11-04-2006, 01:21 PM	THREAD STARTER #1 (permalink)
NetworkTown.Net Account Closed Join Date: Oct 2005 Location: United Kingdom Posts: 1,554	base64_encode well i have one question is base64_encode secure ? i want to make a install.php page where it checks if the site is licenced then it will contine but by encoding it will stop people from removing the check put and installing so do you think it is secure if i use it?

11-04-2006, 02:39 PM	#2 (permalink)
TwistMyArm NamePros Member Join Date: May 2006 Posts: 160	It is absolutely not secure. Your code still has to base64_decode it to run and there's no reason why the guy who runs the script can't do that himself. That is to say, take your base64_encode'd string, decode it himself then print it to screen or whatever. If you want your script to be more secure, I would suggest using an encoder like ioncube and / or running an obfuscator over the code. __________________ Free Fuel Efficiency Calculator \| Buy CMS Templates

11-05-2006, 01:52 AM	#3 (permalink)
beaver6813 NamePros Regular Join Date: May 2005 Location: England Posts: 392 Follow @beaver6813	Yup what he said There is also Zend, and also a few other online services that will do all licensing for your script, check on google You might also maybe want to use a callback feature, that way you would be able to encrypt a string using md5 then check it again when called back. This means that the customer wouldn't have access to the license decoder. __________________ -Beaver6813.com - Web Developer Extraordinaire!

11-05-2006, 07:48 AM	THREAD STARTER #4 (permalink)
NetworkTown.Net Account Closed Join Date: Oct 2005 Location: United Kingdom Posts: 1,554	Thanks for the tips ill see what i can do.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)