View Full Version : PHP script
combs 08-22-2002, 05:38 AM Hi,
I made a site in PHP for my client who has not paid me for my work. Is there any script through which the site expires after some period. It will be useful for my future work.
cerebus 08-22-2002, 07:30 AM Get proper details from your client to be able to verify the identity of him. Then itīs most often enough to just threaten the client to go to court.
Regards,
Clarence Eldefors
http://www.cerebustools.com
michaeln 08-22-2002, 08:14 AM This one is $200 I think:
http://sourceguardian.com/purchase_index.php
But you can set it to make your files expire after a certain amount of time.
Another option is to write your own function or class that causes the script to expire after a certain amount of time it has been running and then encode the page containing that routine here at $0.40 to $1.00 per page....
http://www.ioncube.com/encoder/tour-archive.php
Regards
Michael
Vinayak_Sharma 08-22-2002, 04:12 PM Just set your php to seek true or false statement from a database residing on your servers, if the statement is true it should run properly, if the reply is false it should die.
Now in your databese create client id and corresponding true/false entry.
hope you got it.
:bawling: :bawling: :bawling:
dragonhawk 08-22-2002, 11:12 PM Problem with that vinsar is that the client may just go into the database and manually change that to TRUE...
dragonhawk: what are you talking about? Reread vinsar's post, you misunderstood him:
seek true or false statement from a database residing on your servers
Meaning: make the php scripts call home and verify if they should deactivate or not. It's pretty common in some software packages, although I beleive no php encoding is 100% safe.
dragonhawk 08-22-2002, 11:37 PM My mistake... i missed the "your" servers part :p
AG-Soft 08-22-2002, 11:41 PM Hi!
Please can u send me this code, too! I'm really interested in it. My e-mail-adress is alex@ag-soft.info.
Thank u very much!
Cu
Alex
vSector 08-23-2002, 01:18 AM Originally posted by vinsar
Just set your php to seek true or false statement from a database residing on your servers, if the statement is true it should run properly, if the reply is false it should die.
Now in your databese create client id and corresponding true/false entry.
hope you got it.
:bawling: :bawling: :bawling:
What is stopping them from editing the script to remove the check :eek:
mind21_98 08-23-2002, 04:28 AM Originally posted by vSector
What is stopping them from editing the script to remove the check :eek:
You could buy Zend Encoder, but then you'd wreak havoc on all hosts who do not use Zend Optimizer. (I prefer PHP Accelerator myself because it's free, so Zend Encoder really does bother me. :))
MGCJerry 08-23-2002, 12:42 PM Perhaps integrate the check deep in the script. Like integtrate the check in all the fuctions, and if they remove the check, (which is a required part of the function) the script will break (and perhaps delete the contents of its config file if chmod 666).
Another suggestion (possibly dangerous) but the actual functions on your server only and make the script do an include() or something similar...
Just my mind wandering on the subject. :eek:
mind21_98 08-23-2002, 05:41 PM Come to think of it, isn't it possible to include URLs in an include()? As in:
include "http://www.site.com/scripts/server.inc.txt";
Then create an .htaccess file denying everyone but a certain set of IP addresses. Add his IP when he pays and you'll be set. :)
apokalyptik 08-23-2002, 06:17 PM I was pondering something like this a while ago, and never got around to implimenting it...
it would be possible to have a simple wrapper script that opens a socket to your server, and eval()'s what the socket gives it (after an authentication handshake of course)
it wouldnt stop the person from sniffing or modifying the code to rcord the data as well as eval'ing it, but if they're good enough to do that then they might as well have made the code themselves....
Ahmad 08-23-2002, 06:33 PM No. There is no way you can't get rid off. Except for giving away compiled/encoded scripts, which will require an external, non-standard module.
include "http://www.site.com/scripts/server.inc.txt";
He would download that file using any download utility, and save it locally.
Besides, it's gonna costs you a lot of bandwidth.
mind21_98 08-23-2002, 06:33 PM Originally posted by apokalyptik
I was pondering something like this a while ago, and never got around to implimenting it...
it would be possible to have a simple wrapper script that opens a socket to your server, and eval()'s what the socket gives it (after an authentication handshake of course)
it wouldnt stop the person from sniffing or modifying the code to rcord the data as well as eval'ing it, but if they're good enough to do that then they might as well have made the code themselves....
If his IP wasn't on the whitelist, there wouldn't be anything to worry about in the first place. There is an efficency penalty though due to this. You could use shared memory to cache the code so it's only downloaded once. :)
Ahmad 08-23-2002, 06:38 PM Originally posted by mind21_98
If his IP wasn't on the whitelist, there wouldn't be anything to worry about in the first place. There is an efficency penalty though due to this. You could use shared memory to cache the code so it's only downloaded once. :)
Why did you give him the whole script in the first place? :D
apokalyptik 08-23-2002, 06:44 PM fi schmem was compiled in... but then thats not really addressing the issue anyhow. Maybe if it were downloaded once per day, or something to that effect...
Ahmad 08-23-2002, 07:55 PM I'm really lost here :confused:
You have a client, and you give him all files except one, which you keep on your own servers.
Why would you do that?
If he is a paying client, you can give him the fully working script, if he is not, why give him a broken script in the first place and ask him to redownload the needed file everyday?
mind21_98 08-23-2002, 07:59 PM Originally posted by Ahmad
I'm really lost here :confused:
You have a client, and you give him all files except one, which you keep on your own servers.
Why would you do that?
If he is a paying client, you can give him the fully working script, if he is not, why give him a broken script in the first place and ask him to redownload the needed file everyday?
Maybe the license is on a per-month basis, like CPanel?
Ahmad 08-23-2002, 08:17 PM Well, the first month he saves the file and never need to renew it. :D
mind21_98 08-23-2002, 08:38 PM Originally posted by Ahmad
Well, the first month he saves the file and never need to renew it. :D
True. I guess there *is* a need for stuff like Zend Encoder. If only we lived in a perfect world... :(
Ahmad 08-23-2002, 10:45 PM Zend costs too much, and is not supported by most configurations.
The good thing about PHP scripts is that they work online, so it is easier to locate pirated copies. The method vBulletin are using seems to be working. They have an image or a javascript that links somewhere from your website to theirs.
Then they can revise the logs for the referrer of that image/javascript and compare the URL to those in their licences database. If it is pirated, you contact the user and give them a chance to purchase a copy of the software. If they ignore you, you can go to their ISP, which will probably act at the speed of light in these cases and remove the users forum .. like what happened to me once (which was a mis-understanding) :(
archie2 08-23-2002, 10:51 PM Try this java script and change the date as per your requirement.
Just check it by changing your system date and how it works.
<script language=javascript>
<!--
function chk()
{
var CurrDate = new Date();
var chkDate = new Date("09/01/2002");
if (CurrDate >= chkDate )
document.body.innerText = "Cannot view this page. Contact page administrator";
}
-->
|