biglakes — 2012-07-06T09:41:12-04:00 — #1
I am looking to buy a script from agriya and they will only sell encrypted version of it to me.
The question is, will this be a hassle for any developer(s) that tries to modify/decrypt the script being encrypted.
Any ideas, opinions are welcomed.
jeff_mott — 2012-07-06T10:06:00-04:00 — #2
Yes, it will be a hassle to modify the script. In fact, modifying the script may not even be possible.
Just my opinion, but I consider encrypted sources to be a big red flag that the code is likely to be poor quality.
biglakes — 2012-07-06T10:11:49-04:00 — #3
Guessed as much too. Thanks for helping out with this tip.
logic_earth — 2012-07-06T11:08:47-04:00 — #4
What are they using to encrypt the scripts with?
biglakes — 2012-07-06T11:34:06-04:00 — #5
I really don't know but just finds it weird that it's been encrypted.
Here's what they replied with;
package is not open source(will be encrypted)...however, you are free to do design changes as you want however if you want the script decrypted you may have to choose a different and more expensive package.
logic_earth — 2012-07-06T11:48:47-04:00 — #6
If they don't have a requirement for ionCube or Zend on the server they are probably using a poor-man's version of encryption...which is easily break able. How shocking for a company that says they have an "army of 200 developers" pfft yeah right.
biglakes — 2012-07-06T11:52:58-04:00 — #7
Got me wondering too.
Thanks for helping out.
biglakes — 2012-07-06T16:44:34-04:00 — #8
I asked an alternative to Agriya (fundraisingscript.com) right after you asked me same question about their encryption model and they sent me server requirements as thus;
Linux Operating System (Cent OS Recommended)
PHP 5.0 (or Higher)
mySQL 5 (or Higher)
GD Library (Available free at http://www.libgd.org)
IonCube Loader (Available free at http://www.ioncube.com/loaders.php)
Mod Url_rewrite enabled
Ability to run at least 2 cron jobs every day
Open SSL compiled with PHP (fsockopen must be enabled)
P.S. Whole fundraising script is built using valid php, xhtml, jquery-ajax coding and php framework called "CodeIgniter", and its MVC structure.
What do you think?
force — 2012-07-07T20:17:09-04:00 — #9
Encryption is usually done to protect the source code--not "hide bad code".
I sell licenses for a PHP webapp I developed, and I encrypt the source code. That prevents folks from re-distributing/re-selling/re-using my code for the application being sold.
Without knowing the name of the webapp you're trying to purchase, I'm guessing it's a similar situation. If you want any modifications, you'll have to make the requests through the company producing the webapp.