The ionCube encoder is now launched. at http://www.ioncube.com/encoder (and http://www.php-encoder.com)
The site offers the first secure online encoding service of files and entire application archives, uses compiled code encoding (the same as Zend Encoder), has safe mode compatibilty, full language support, and other features, plus compatibility with release 1.3.2. of the PHP Accelerator (http://www.php-accelerator.co.uk)
A standalone encoder will be released soon that packs in even more features, but the online encoding provides a highly affordable solution for those with modest encoding needs. A price guide on the site gives some pricing examples.
0
ionCube PHP Encoder is launched
Started by Guest_phpa_*, Jul 27 2002 06:04 PM
20 replies to this topic
#2
-
- Members
-
- 556 posts
Advanced Member
Posted 27 July 2002 - 06:13 PM
Online decoder?
Interesting idea... 8) This is the first time i have seen an online php compiler! Wisy you luck! :thumb:
Interesting idea... 8) This is the first time i have seen an online php compiler! Wisy you luck! :thumb:
#4 Guest_phpa_*
-
- Guests
Posted 27 July 2002 - 06:17 PM
Quote
This is the first time i have seen an online php compiler! Wisy you luck!
Thanks. After launching the PHP Accelerator, this was the obvious next step.
I really want to give people the chance to have Zend Encoder type encryption for a few $'s or less rather than a few $$$$
A standalone encoder will follow fairly soon as well.
#5 Guest_phpa_*
-
- Guests
Posted 27 July 2002 - 06:20 PM
Quote
It decodes PHP?
Or what?
Or what?
Not decode (I have an app for that too though
), but encode. If you develop some software, or have some scripts with a password, and want to protect it from people seeing the source, then use the encoder. So far you would have to buy an encoder that would cost you several hundred or even thousands of dollars. That can be fine, but what about the people who just want to protect a few scripts?This is the idea of the online service.
#6
-
- Members
-
- 487 posts
Advanced Member
Posted 27 July 2002 - 06:22 PM
well ... encode what? PHP code?
I thought PHP code isnt 'visible' in html source code?!
I thought PHP code isnt 'visible' in html source code?!
#7
-
- Members
-
- 556 posts
Advanced Member
Posted 27 July 2002 - 06:24 PM
Quote
well ... encode what? PHP code?
I thought PHP code isnt 'visible' in html source code?!
I thought PHP code isnt 'visible' in html source code?!
He he he..
Yes you are right..
But think what if:
* You have a commercial script you want to distribute safely.. How? If someone buys and gives others.. Then you lost profit..
#9 Guest_phpa_*
-
- Guests
Posted 27 July 2002 - 06:36 PM
Quote
There is a discussion about it here
One of the differences with the ionCube encoder is compiled code encoding. This provides massively more security than source code encoding. With source code encoding, just put a breakpoint where PHP compiles a string and you've got the source coming out.
With compiled code encoding the code is already translated from source *before* it's encoded. As with the other heavyweight encoder, Zend Encoder, the ionCube encoded files aren't even executed inside PHP anymore so that not only can you not see the source, you can't easily step through execution using gdb either.
The aim is to offer serious encoder technology but affordable by everyone. This was largely why I made PHPA free in the first place too.
#10
-
- Members
-
- 24 posts
Member
Posted 09 September 2002 - 05:58 AM
Quote
Not decode (I have an app for that too though ), but encode. If you...
), but encode. If you...Can you decode the Zend Encoder bitcode? If so, that's the first time I've heard of this being possible.
I'm assuming you can only decode files encoded with your encoder, which (if thats the case) is enough reason to make some of us wary enough to not try it.
#11 Guest_phpa_*
-
- Guests
Posted 09 September 2002 - 08:45 AM
Quote
Can you decode the Zend Encoder bitcode? If so, that's the first time I've heard of this being possible.
I'm assuming you can only decode files encoded with your encoder, which (if thats the case) is enough reason to make some of us wary enough to not try it.
I'm assuming you can only decode files encoded with your encoder, which (if thats the case) is enough reason to make some of us wary enough to not try it.
WIth respect that's a bizarre thing to write and I think that you may be missing the point somewhat. When someone makes an encoding product, if it's any good and of any use at all it will not be easily decoded by *another* vendor. Even though the source code that's encoded by the cheapest encoders in the market can be easily restored, the files themselves can't be easily decoded. People would have a hard time decoding Zend files, and certainly a hard time decoding ionCube files. Zend and ionCube don't encode source.
That is why each vendor provides a loader. For Zend it's Zend Optimiser. For ionCube files it's the unique "Hybrid" loader. Ok? So loading of other files is irrelevant provided that you have loader compatability *compatability*.
To add value and be useful to the widest market, the loader should be compatible with the widest variety of platforms. The ionCube encoder is unique in that it's actually a "Hybrid". You can install the loader along with PHPA if you want the best acceleration possible for your non-encoded files and you can install it with Zend Optimiser if you need to run zend encoded files too, or you can install without either of those of course. *OR* you can have the loader dynamically loaded at run time by the encoded scripts themselves. So you have safe mode compatibility and compatability with the other important extensions, or you can have it loaded without changes to php.ini or even a server restart. No other encoding product offers the user the choice of both of these alternatives. (runtime loader installation requires the 1.0.4 loader and encoded files from the standalone encoder as the online encoder is still version 1.0.3 but will be upgraded to 1.0.4 within th next 24 to 48 hours when the 1.0.4 freebsd and openbsd loaders are installed. The linux loaders are at 1.0.4)
Btw., the standalone encoder is now launched with a FREE fully featured downloadable evaluation version.
I hope this is helpful and clarifies things somewhat.
#12
-
- Members
-
- 24 posts
Member
Posted 09 September 2002 - 11:03 AM
I believe I misinterpreted the verbiage in your prior post and "jumped the gun". ;D Obviously you were talking about the end-user app that reads the encoded file, not an app to revert the PHP back to the original state -- the source. I read encode/decode in the most literal sense, and my first thought was how a "decoder" would cancel out the usability of the product.
I apologize for requiring you to re-explain the mechanics -- though hopefully it will enlighten some other readers and work to your benefit.
I look forward to evaluating your product as an alternative to the Zend Encoder as our subscription is up for renewal in the coming weeks!
Thanks for taking the time to clear that up. ;D
I apologize for requiring you to re-explain the mechanics -- though hopefully it will enlighten some other readers and work to your benefit.
I look forward to evaluating your product as an alternative to the Zend Encoder as our subscription is up for renewal in the coming weeks!
Thanks for taking the time to clear that up. ;D
#13 Guest_phpa_*
-
- Guests
Posted 09 September 2002 - 12:08 PM
<chuckle> No problem, and thanks for your original post
This is actually why we renamed the product to loader. Even though it does decode the encoded files internally (but not back to source), it's doing that as part of the loading process and so loader is really a more appropriate term. The decoding aspect is not what the loader is about as far as the end user is concerned.
This is actually why we renamed the product to loader. Even though it does decode the encoded files internally (but not back to source), it's doing that as part of the loading process and so loader is really a more appropriate term. The decoding aspect is not what the loader is about as far as the end user is concerned.
#14 Guest_PHPfun_*
-
- Guests
Posted 05 December 2003 - 08:31 PM
Seems your "unbreakable" ioncube encoder is have a possibility to be decoded script back to source.
Look at this:
ftp://147.46.237.66/...TinyEditSrc.zip
Look at this:
ftp://147.46.237.66/...TinyEditSrc.zip
#15 Guest_blay_*
-
- Guests
Posted 02 February 2004 - 06:01 PM
Ok I am interested in this software and I followed that link but it took me no where.....what was it a program or just a piece of source code?
Could you please repost it.
Thanks
Could you please repost it.
Thanks
#16 Guest_blay_*
-
- Guests
Posted 02 February 2004 - 06:02 PM
When I say I am interested in the software I meant the ioncube. But not if it can't do what I want it to do.
#17 Guest_ioncube_*
-
- Guests
Posted 11 February 2004 - 12:41 PM
Quote
Seems your "unbreakable" ioncube encoder is have a possibility to be decoded script back to source.
Not at all, not least because encoded scripts don't contain any source, only encoded compiled code that is restored and executed inside the Loader by a modified execution engine.
In contast to the ionCube solution (and Zend, as they use similar techniques), it is the case that most encoding products do rely on simply encoding source, restoring it at runtime, and calling the eval() function. In some products the source isn't even obfuscated.
This has serious consequences for several reasons.
1) Security - there is none! There are $60 products that claim "bulletproof" security, but this is nonsense as a trivial one line change to the PHP engine is all that's required to show the restored source from files as they flow through the PHP compiler.
2) Language compatibility - encoding systems that rely on calling eval() to execute restored source are not 100% compatible with original source.
3) Performance - performance of encoded systems that rely on eval() are always going to be worse than even original source, in some cases quite seriously slower. Further more, due to the use of eval(), code caches such as PHPA, mmcache etc. will not be of any assistance. In contrast, systems such as ionCube and Zend will typically execute encoded files faster than original source. e.g. Some Benchmarks
For anyone serious about guarding their intellectual property and achieving a return on their development costs, a professional encoding solution that uses compiled bytecode technology (CBT) is imperative.
#18 Guest_Guest_*
-
- Guests
Posted 06 December 2004 - 07:27 AM
Here found a php file encoded by zend encoder that spids out clear source... Any coments? How this can be? You can download this file from me http://www.mmmm.ru/567/login.rar and play with it your self.. Install it on server with Zend otimiser installed.. and run it through the browser.. . In browser click view html source and .... YOU get back the source.. from encoded binary ZEND file... Here you can see the output of it.. http://www.mmmm.ru/567/login.php In login.rar file there is that binary zend file... So play with it let me know what you think..
Basically I know why it does it.. Just don't know how to pass it to files that don't have that...
Another find for ZEND include("/encoded/file.php"); echo "
"; var_dump($GLOBALS); It will dump all $GLOBALS out of encoded file.
include("index.php"); echo "<pre>"; print_r($GLOBALS);
Another one
my email: order@mmmm.ru
Basically I know why it does it.. Just don't know how to pass it to files that don't have that...
Another find for ZEND include("/encoded/file.php"); echo "
"; var_dump($GLOBALS); It will dump all $GLOBALS out of encoded file.
include("index.php"); echo "<pre>"; print_r($GLOBALS);
Another one
my email: order@mmmm.ru
#19 Guest_Noril_*
-
- Guests
Posted 21 July 2005 - 07:23 PM
Quote
Quote
Can you decode the Zend Encoder bitcode? If so, that's the first time I've heard of this being possible.
Of course it's possible!!!! Just follow link http://phpdecode.com/, and decode any script encoded with Zend Encoder.
#20 Guest_zPois_*
-
- Guests
Posted 21 July 2005 - 07:29 PM
Quote
Another find for ZEND include("/encoded/file.php"); var_dump($GLOBALS); It will dump all $GLOBALS out of encoded file.
And another variant - use http://phpdecode.com/, and decode any script encoded with Zend Encoder.
1 user(s) are reading this topic
0 members, 1 guests, 0 anonymous users
