We have a website maintained by an old employee and it appears it's encoded by Zend Guard including all backups.I know a little about Zend Optimizer, but never considered it for source protection as I know in the end the bytecode will need to be decoded for the interpreter, and was sure people easily decode optimized files using some software.Now I need to decode some files and I can't find anything but some 'paid services'. We have the ownership of the code and are locked out now for any changes and debugging. How can I decode our files back? Thanks Orbling, good answer.
Formatting and documentation is not a problem. So I'll try a paid service and if they can't, I'll consider the product as a reliable way to sell closed source PHP for future projects; we never entered that market because we thought it would be easy to decode.
The funny thing is when I was researching methods to hide ms-sql code and PHP code, I got a lot of replies from people like 'you don't need to, license agreements are there to protect you', 'that's evil, why do you need to hide your code?' , 'you can't'. =)–Nov 29 '10 at 4:02. @SuperDuck The company I was at previously had a policy of always encrypting the central core libraries of PHP websites we developed. The company had major libraries, mainly developed by myself, that provided APIs for all manner of backend functionality - this was deemed company intellectual property and was only licensed to clients for use with the website we developed for them. If they did not host with us directly, then that low-level API section of the code was encrypted and bound to domain.
The rest of the site superstructure left unencrypted so changes could be made.–Nov 29 '10 at 4:34.
Hi All,I have posted to and helped on this forum for years. I respect the feedback of folks here. Recently I searched to see if zend encoded files can be decoded - specifically files from ionCube which I own. This is one time when I don't want to ask the developer, ionCube, but instead want to ask the community. I am wanting to encode a source library of functions I have developed and wonder if it really will be possible to simply run them through a process and decode them.I do see services, most with grammatical errors like a foreign site, inviting me to pay to have it decoded, but am not willing to do that just yet as paying for a failed decode doesn't mean decoding is impossible 🙂Samuel.
Sfullman;10962128 wrote:simply run them through a process and decode them.according to both zend and ioncube, no. According to some very suspect looking site, yes.With all security measures the question is 'is it good enough' is the pay off for breaking the encoding worth the timemoney to do so?I think its unlikely that what you do is so valuable (no disrespect to your code, just that any one can hire some Indians (no disrespect to Indians you just work for less) to replicate it for not a lot) that some one would go to the trouble of breaking the encoding. You should of course have a contract in place so you have some options should they choose to. Dagon;10962177 wrote:With all security measures the question is 'is it good enough' is the pay off for breaking the encoding worth the timemoney to do so?And apart from encoding, it supposedly does some other things as well. I say supposedly since I have not looked at decoded code myself, but it is according to Zend, and I doubt they'd put something like that in print if it wasn't true.So, assuming it's true, it strips comments and indentation. Moreover, it's supposed to also do 'code obfuscation'. I do not know exactly what that would mean, but one guess is shortening names for variables, functions etc, similar to what you commonly see when it comes to javascript on the web.So, I'd agree with Dagon that you probably have good enough protection here, and should indeed go the rest of the way with a license agreement.
How To Decode Php Files That Encoded By Zend Encoder And Decoder Key
So there's no verifiable source where you can submit a zend or ioncube encoded file and for like 15 bucks the guy returns your file unencoded and you say 'wow, that's exactly the code!' Is that correct?Also it has always been a mystery to me how a computer can read and follow a program but a person couldn't masquerade as a CPU and get the program routine. Guess there's a concept about going to binary which I don't apprehend fully. I get MD5, but not this. Part of me wants to get a CS degree just to understand this, but then part of me wants to start my own mexican restaurant called 'the Happy Gringo' which would feature some of the low-fat alternatives which we make at home - and yes I'd get rich doing it.I think I'll continue with programming.Samuel.
Sfullman wrote:Binary code is like a maze for marbles that can loop the marbles as well. CODING is instructions on how to build the maze. The maze itself carries no instructions, only paths for the marble. It carries little or no revelation as to the logic of how it works. Is that correct?Not sure what you're getting at, but note that machine language ('binary code' - the 0's and 1's) is just that - simply another language. The only difference is, machine language is a language that your processor can actually understand. Thus, a program written in the PHP language is executed simply by translating it into machine language.
Bradgrafelman wrote:Thus, a program written in the PHP language is executed simply by translating it into machine language.That does not quite sound correct to me, as I do not think that the PHP interpreter compiles the PHP code into machine code and then causes the machine code to be executed. Rather, if we exclude the encoders that thus involve bytecode, the PHP interpreter parses the PHP code at run time and then executes it. Machine code is involved indirectly through the interpreter, which is itself executed.