I have been developing PHP applications for quite some time. I have always wondered if there was any easy way of hiding your PHP source code such that anyone who has access to the server on which the application is hosted on, would not be able to see the raw PHP code.

Furthermore, I am looking for ideas on how to prevent a PHP application from being used on more than one host computer i.e. locking the PHP application to a specific computer.

I came across someone who wants me to build a particular PHP application but wants to have access to the source code so that he would be able to edit the source code if he finds any problem, or so he claims. The issue here now is how to deploy the application is such a way that the server admin is able to edit the source code if he wants but is not able to 'steal' the application and use it on another computer, and this may mean obscuring the source code or some other form of security, does anyone have any ideas on how to do this, on how to allow a person edit source code if he wants but not 'steal' the application and use it on another computer. I am trying to do some research on this and would post any ideas I find here. I would appreciate all the help I can get from nairaland software developers.

You are looking for a miracle. The best way for a script to run on a particular pc only is you use activeX or Java script to get the MAC address. Otherwise get the user's ip, then write something like


<? $ip = getenv("REMOTE_ADDR" ; getenv("REMOTE_ADDR";

// 23.12.34.45. being the users ip

if ($ip ! = 23.12.34.45.)
{
header("not_authorised.php";
}
else
{
header("authorized.php";
}
?>

It is very possible at a price through customized encryption of just a function, class, page or just 1 line of code that's important to the whole process but if you want free, then you can put an important function in a file thats called using include. make the function run something like Z1mbabwean's code and then encrypt the file with my PHPLocker available free at my website at www.afrisot.org. If you need more security, i can modify PHPLocker for you at a small price.

Think what you need is an ioncube software .It encrypts your php code and also adds restiction to the domain on which the codes can run.this way you can license your applications to specific domains.
You could get one from www.ioncube.com

@Z1mbabwean
Thanks for your suggestion. Getting the user's IP and/or MAC address and restricting the application to this info would do a good job of limiting the application to one computer. It's just that IP addresses and MAC ADDRESSES CAN BE CHANGED. The success of this endeavour would greatly depend on preventing the user from knowing that MAC addresses and/or IP addresses are the limiting factor. Thanks again,

@lojik
I like your idea and I'm impressed with your work, I visited your site and I like what you've done. Please keep it up. I like knowing hardworking people like you exist in this dreary country. I would like to stay in touch with you and probably share a few ideas.

@wizziweb
Thanks

More suggestions are definitely welcome. Thanks everyone.

davidt:

@lojik
I like your idea and I'm impressed with your work, I visited your site and I like what you've done. Please keep it up. I like knowing hardworking people like you exist in this dreary country. I would like to stay in touch with you and probably share a few ideas.

Thanks a million man. u just doubled my velocity in the right direction. _*blushing*

@davidt , you should take a look at http://www.zend.com/en/products/guard/

It has everything you need , i've actually used it a few times , the draw back is that it requires the php version on the server to have Zend Optimizer (PHP 4 or later have it)

complete encryption
ip / server locking
licensing / trial limits

Just check it out , you'll see.

Thanks scartag.

I have already checked it out. The fact that it requires the server to have Zend Optimizer is a phenomenal drawback in my case. Nevertheless, it's a really wonderful tool.

Thanks a lot for your contribution, man!