Open Source PHP Encoder [closed]

Question

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.

Closed 12 years ago.

Are there some recomendations on Open Source or Free PHP Encoder systems? Is something available?

• cbrandolino: -1 for irony overload between Open Source and PHP encoder.

Answer 1

Obfuscating PHP just makes it difficult for the casual observer to study the code. It will not keep someone who is determined at bay for very long. Granted, the unobfuscated version they're able to produce might not match your code line by line, but it will be close enough.

The only reason I could see to use one would be to ensure that people did not short circuit a licensing check, however even that is trivial to accomplish in most cases.

I recommend just trusting your customers, or build offerings that are designed to be delivered mostly, if not entirely as a service.

That being said, you can try actually compiling your PHP apps into native executables that work via FCGI dispatch or come complete with an embedded web server. Tools to help you do that are the PHP Compiler (phpcompiler.org) and Roadsend.

Still, you won't stop someone who is determined to modify their copy, or study how it works.

• devasia2112: great, thanks. Actually the software is to be served as a service, then no problem about who will use this. The major problem is, inside a company, as a programmer / supervisor of the whole project I need to keep the code closed even being a php code. 'cause I can't trust another programmers inside company. They can use the project to sell as another name or another purpose, and it is a risk to the company. I read about PHC, perheaps is a great ideia, I will give a try. I know I can't stop someone who is determined to modify, but at least it must be a little difficult.. :-)
• Orbling: @Fernando Costa: Locking code internally from other coders is a major issue. How are they supposed to work effectively on it, if it is all locked up? You need stricter contracts and better staff if this a problem.
• devasia2112: Back to the problem. Actually I have models of delivery my software to Clients. One is entirely by SaaS (No Problem). The Second one is by installing an instance in my client (put my code there). Any programmer or even experienced users can read it. The code is not an open source, then I still fighting on this matter, and trying to my clients get convinced to host software in my SaaS model.. but some clients, just want the code hosted by himself. o_O
• user131: @FernandoCosta Make each 'source' installation slightly unique. Something subtle about it should be different for each client, and record those differences. Let clients know that their installation is unique, and if a version finds it's way out in the wild, they will be held responsible. Then ask them if they really want the source code. Or, just don't allow on site licensing. You can also make some proprietary PHP extensions that your code depends on.. you have options.
• devasia2112: @Tim Post - Thanks for the advice. I really liked about "proprietary PHP extensions" How should I do that? Any resource or a How to build up extension in php? Is it something that need to be coded in C/C++ ? Thanks for the response! :)

Answer 2

Don't fool yourself. You don't need an encoder. If you still feel like it, there is a Raiz Labs PHP Obfuscator. Any many others, just use Google.

• devasia2112: hey @Vlad was just a question you do not need to shoot lightning cause it. Anyway thanks for your answer. be polite next time man!

Answer 3

If what you look for is a compiler, not encoder, check out hiphop. Otherwise, it is rather hard to write an encoder that would sufficiently hide details about your PHP script, so don't put high hopes in obfuscators beings secure or making your code un-recoverable.