Anyone know a program to obfuscate (make unreadable) PHP scripts? - GoFuckYourself.com

rowan · 03-31-2004, 06:35 AM

Something that can turn this

Code:

      $outurl = $tr_url["$this_tradeid"];
      update_nosend_cookie($this_tradeid);

      write_update("tr_out", $this_tradeid);
      $clicktype = "TRCLICK";

into this

Code:

$IopQlZ=$tr_url["$UjhjAh"];IUjuWuiKJgdkJZ($UjhjAh);JKSHueoJhjkh("tr_out",$UjhjAh);$oiAhZZ="TRCLICK";

I've just done a simple sed script to replace variable names, function names and also strip spaces, but it's pretty tedious to have to check for new elements and add them in manually.

Anyone know of anything that can do this automatically?

=^..^= · 03-31-2004, 06:40 AM

hmm not sure if this works with php but i use it on my general html pages:

http://www.dynamicdrive.com/dynamicindex9/encrypter.htm

just cut and paste - it spits out scrambled code

rowan · 03-31-2004, 06:43 AM

Quote:

Originally posted by =^..^=
hmm not sure if this works with php but i use it on my general html pages:

Nah, that won't work with server-side PHP, Javas<b></b>ript is client-side. Also, I need to obfuscate the code so that it's very difficult to read, otherwise it's fairly trivial to decode it and then they have the original source... this way it takes a LOT more work for them to figure out what the code does and they can NEVER get back the original source that's on my comp.

savas · 03-31-2004, 06:45 AM

you can use this one, but it is not free!

rowan · 03-31-2004, 06:45 AM

Zend isn't an option since it requires a plugin on the server... obfuscation means that any bog standard PHP installation can execute it.

JamesDotCom · 03-31-2004, 06:50 AM

http://www.google.com/search?q=php+o...UTF-8&oe=UTF-8

senseidru · 03-31-2004, 06:51 AM

I use ioncube, I think obfuscation is a waste of time, if you want to protect your code do it proper. With ioncube the server doesn't have to have the plugin, you can include a file with the php script which enables it to run without needing the plugin installed.

rowan · 03-31-2004, 06:57 AM

Quote:

Originally posted by senseidru
I use ioncube, I think obfuscation is a waste of time, if you want to protect your code do it proper. With ioncube the server doesn't have to have the plugin, you can include a file with the php script which enables it to run without needing the plugin installed.

If the script decodes it then surely a hacker can?

Found one interesting looking script so far:

http://pobs.mywalhalla.net/

Runs on-server. All of the other code obfuscating programs I've seen so far run on Windows.

shogun3k · 03-31-2004, 06:59 AM

ermm,, you're php is hidden on the server anyway. Dont have to encode it.

rowan · 03-31-2004, 07:02 AM

Quote:

Originally posted by shogun3k
ermm,, you're php is hidden on the server anyway. Dont have to encode it.

It's for public distribution, and if it's a vhost then it's often not very 'hidden'

Some PHP scripts require that you chmod them to world read access so there are no clashes with your uid and the web server's uid. Anyone who has access to that server can view your files.

senseidru · 03-31-2004, 07:08 AM

Quote:

Originally posted by rowan

If the script decodes it then surely a hacker can?

No, it is not decrypted by a script. The file you include with the php files tells the server how to decrypt because you don't have the plugin. The code is decrypted server side, not sent to the user.

rowan · 03-31-2004, 07:17 AM

Quote:

Originally posted by senseidru

No, it is not decrypted by a script. The file you include with the php files tells the server how to decrypt because you don't have the plugin. The code is decrypted server side, not sent to the user.

Hmm... maybe we're thinking about different things. I want to obfuscate my code so I can distribute it, not because I am worried about others stealing it from my server.

If you distribute a script which is encoded and has the decoding routine as part of the script - then it can be decoded to the original source by a human... that was my point.

POBS was very easy to set up and so far it's looking great. There are some clear text words which have to be preserved for the script to work, but it's pretty difficult to work out what it's doing as a whole. This is the same code snippet from my first msg.

$V7b0b89d8=$Vd4605e3e["$V61837c69"];F27deaa51($V61837c69);F98416cc8("tr_out",$V61837c 69);$V024507c2="TRCLICK";

Cyborg 2.0 · 03-31-2004, 08:20 AM

just use zend encoder another php encoder

03-31-2004, 06:35 AM	#1
rowan Too lazy to set a custom title Join Date: Mar 2002 Location: Australia Posts: 17,393	Anyone know a program to obfuscate (make unreadable) PHP scripts? Something that can turn this Code: $outurl = $tr_url["$this_tradeid"]; update_nosend_cookie($this_tradeid); write_update("tr_out", $this_tradeid); $clicktype = "TRCLICK"; into this Code: $IopQlZ=$tr_url["$UjhjAh"];IUjuWuiKJgdkJZ($UjhjAh);JKSHueoJhjkh("tr_out",$UjhjAh);$oiAhZZ="TRCLICK"; I've just done a simple sed script to replace variable names, function names and also strip spaces, but it's pretty tedious to have to check for new elements and add them in manually. Anyone know of anything that can do this automatically?

03-31-2004, 06:40 AM	#2
=^..^= Confirmed User Join Date: Jan 2002 Location: ICQ 380-366 Posts: 6,935	hmm not sure if this works with php but i use it on my general html pages: http://www.dynamicdrive.com/dynamicindex9/encrypter.htm just cut and paste - it spits out scrambled code __________________ #RememberYourRoots #AaronMForGFYHOF

03-31-2004, 06:51 AM	#7
senseidru Confirmed User Join Date: Sep 2002 Location: UKStyle.UKFlow Posts: 1,767	I use ioncube, I think obfuscation is a waste of time, if you want to protect your code do it proper. With ioncube the server doesn't have to have the plugin, you can include a file with the php script which enables it to run without needing the plugin installed. __________________

03-31-2004, 06:59 AM	#9
shogun3k Confirmed User Join Date: Mar 2004 Posts: 480	ermm,, you're php is hidden on the server anyway. Dont have to encode it. __________________

03-31-2004, 08:20 AM	#13
Cyborg 2.0 Confirmed User Join Date: Mar 2004 Location: Canada T.O. Posts: 851	just use zend encoder another php encoder __________________ Need custom scripting? Need mutli category tgp script with thumb previews? Contact me 19671897

03-31-2004, 06:45 AM	#4
savas Registered User Join Date: Aug 2002 Posts: 1,045	you can use this one, but it is not free!

03-31-2004, 06:50 AM	#6
JamesDotCom Registered User Join Date: Mar 2004 Location: UK Posts: 35	http://www.google.com/search?q=php+o...UTF-8&oe=UTF-8