| View previous topic :: View next topic |
| Author |
Message |
FreezingFire
Admin Team
Joined: 23 Jun 2002
Posts: 3508
|
 Posted: Sat Apr 12, 2003 5:58 pm Post subject: |
 |
|
Checking a program's code for alteration should be fairly easy by using an
MD5 checksum (VDSMD5.DLL). 
But there's probably a way around that too. 
_________________
FreezingFire
VDSWORLD.com
Site Admin Team |
|
| Back to top |
|
 |
PGWARE
Web Host
Joined: 29 Dec 2001
Posts: 1567
|
| Posted: Sat Apr 12, 2003 6:07 pm Post subject: |
|
|
No matter what you do there is a workaround, the program can be patched and the online check removed. However this would then mean that every version you release would need to be patcheds and that's just more work for the lamer to make another patch. Make it as difficult as possible for the lamer to crack your app and let them suffer is my motto.
They will crack it, it's not a matter of if but when they crack it. They could of course distribute a cracked exe, then again their consuming their server's bandwidth for that, which is more of a hassle for them. Do anything you can to make the lamer suffer.
Online checks are a good way to protect your code, however make sure that the online check is optional. What I mean is that if a network detection is found then check to see if the user's serial is indeed legit by checking with it online. You will need to store a database online of all customers who have purchased from you to do this. Now if the user never goes online and uses a crack you will never catch this person, however the majority of pirates go online and that's where they get cracks/keygens etc. and your program can then check to see if it's using a valid serial. If it's not a valid serial take any action you deem appropriate (within the law). |
|
| Back to top |
|
|
tim6389
Professional Member
Joined: 01 Aug 2002
Posts: 790
|
| Posted: Sat Apr 12, 2003 6:52 pm Post subject: |
|
|
hummmm online checks...hummm i like the sound of that maybe for my next project i will start to play with that i have a few ideas i want to try
_________________
Have a nice day |
|
| Back to top |
|
|
FreezingFire
Admin Team
Joined: 23 Jun 2002
Posts: 3508
|
| Posted: Sat Apr 12, 2003 7:04 pm Post subject: |
|
|
Such a project would probably require some PHP Programming or some
programming of other server-side languages (i.e. ASP, CGI ...)
It is pretty hard to do so I would recommend a good background knowledge
of the internet and VDS before taking on such a project.
_________________
FreezingFire
VDSWORLD.com
Site Admin Team |
|
| Back to top |
|
|
Skit3000
Admin Team
Joined: 11 May 2002
Posts: 2166
Location: The Netherlands
|
| Posted: Sat Apr 12, 2003 7:12 pm Post subject: |
|
|
It isn't that hard to make a good PHP script for it... Use something like this:
| Code: | <?
$host = 'localhost';
$username = '';
$password = '';
$dbname = 'programname';
if (!mysql_connect('$host','$username','$password'))
{
echo "ERROR";
}
mysql_select_db($dbname);
$sql=mysql_query("SELECT * FROM `serials`");
while($row=mysql_fetch_object($sql))
{
if ($row->name == "$name")
{
if ($row->serial == "$serial")
{
echo "CORRECT";
} else {
echo "WRONG";
}
} else {
echo "WRONG";
}
?> |
Call it from within your script with http://www.url.com/filename.php?name=regname&serial=d8dj2345kds82j5
_________________
[ Add autocomplete functionality to your VDS IDE windows! ]
Voor Nederlandse beginners met VDS: bekijk ook eens deze tutorial!
Last edited by Skit3000 on Sat Apr 12, 2003 7:28 pm; edited 1 time in total |
|
| Back to top |
|
|
FreezingFire
Admin Team
Joined: 23 Jun 2002
Posts: 3508
|
| Posted: Sat Apr 12, 2003 7:18 pm Post subject: |
|
|
No, I never meant it was hard to make the actual script, it was just going
to be hard for someone who probably doesn't have a working knowledge
of PHP yet.
Just meaning that you should probably fully understand what you're doing
before doing it or it could have a security hole in it.
_________________
FreezingFire
VDSWORLD.com
Site Admin Team |
|
| Back to top |
|
|
Skit3000
Admin Team
Joined: 11 May 2002
Posts: 2166
Location: The Netherlands
|
|
| Back to top |
|
|
tim6389
Professional Member
Joined: 01 Aug 2002
Posts: 790
|
| Posted: Sat Apr 12, 2003 7:25 pm Post subject: |
|
|
FreezingFire - you have a good point..but i was thinking like a exe on the serverside..instead of php or perl
_________________
Have a nice day |
|
| Back to top |
|
|
DW
Contributor
Joined: 21 Mar 2003
Posts: 175
Location: UK
|
| Posted: Sat Apr 12, 2003 7:26 pm Post subject: |
|
|
Maybe a system that checks online and gets the new code every week or something. Maybe a program that works for a week before it needs to download the new exe, maybe that would slow crackers, they would get pissed off having to crack it all the time.
Shame theres no way to make the program in use all the time. Then again a cracker would target the active mem to crack it.
interesting thoughts though |
|
| Back to top |
|
|
FreezingFire
Admin Team
Joined: 23 Jun 2002
Posts: 3508
|
| Posted: Sat Apr 12, 2003 7:26 pm Post subject: |
|
|
I'm just giving you a general idea... I never said that your code was
hackable. 
Also, Skit, the variable "$username" is written in Dutch when you define
it. "$usernaam" should be "$username".
_________________
FreezingFire
VDSWORLD.com
Site Admin Team |
|
| Back to top |
|
|
Skit3000
Admin Team
Joined: 11 May 2002
Posts: 2166
Location: The Netherlands
|
| Posted: Sat Apr 12, 2003 7:27 pm Post subject: |
|
|
| tim6389 wrote: | | FreezingFire - you have a good point..but i was thinking like a exe on the serverside..instead of php or perl |
Do you mean an exe as server? Cause most servers are Linux or Unix, so that won't work... Or do you mean what DW says about sending a new exe to the users?
_________________
[ Add autocomplete functionality to your VDS IDE windows! ]
Voor Nederlandse beginners met VDS: bekijk ook eens deze tutorial! |
|
| Back to top |
|
|
Skit3000
Admin Team
Joined: 11 May 2002
Posts: 2166
Location: The Netherlands
|
| Posted: Sat Apr 12, 2003 7:28 pm Post subject: |
|
|
| FreezingFire wrote: | I'm just giving you a general idea... I never said that your code was
hackable.
Also, Skit, the variable "$username" is written in Dutch when you define
it. "$usernaam" should be "$username". |
Actualy it was a typing mistake... If it was Dutch (from which I translated it ) it should have been $gebruikersnaam...
_________________
[ Add autocomplete functionality to your VDS IDE windows! ]
Voor Nederlandse beginners met VDS: bekijk ook eens deze tutorial! |
|
| Back to top |
|
|
LOBO
Valued Contributor
Joined: 14 Mar 2002
Posts: 241
Location: Wilmington, Delaware, USA
|
| Posted: Sat Apr 12, 2003 7:34 pm Post subject: |
|
|
| Skit3000 wrote: | | If it was Dutch (from which I translated it ) it should have been $gebruikersnaam... |
Think I'll stick with english....
$gebruikersnaam = 15
$username = 9
6 fewer character strokes 
-Mark |
|
| Back to top |
|
|
FreezingFire
Admin Team
Joined: 23 Jun 2002
Posts: 3508
|
| Posted: Sat Apr 12, 2003 7:37 pm Post subject: |
|
|
Oops. 
Don't know Dutch. I just knew that name was something like naam.
Dutch is pretty cool. I wish I knew it.
_________________
FreezingFire
VDSWORLD.com
Site Admin Team |
|
| Back to top |
|
|
Skit3000
Admin Team
Joined: 11 May 2002
Posts: 2166
Location: The Netherlands
|
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
@vdsworld