保护 PHP 代码的经验
我知道有许多 PHP 代码混淆器/许可程序。我想知道是否有人真正使用过这些以及他们的体验如何。
请注意，我不想知道可用的解决方案。我想了解您使用其中一种解决方案的体验。是否值得投资，例如 200 美元购买代码混淆器等？
老实说，我更喜欢没有装载机等的东西。我知道它会增加破解的机会，但我只希望它成为对他们不利的因素。
感谢您抽出时间。
I am aware of that there are a number of code obfuscators/licensing programs for PHP. I wanted to know if anyone has actually used these and what their experience has been.
Please note I do not want to know the solutions available. I want to know your experience using one of these solutions. Is it worth investing say 200$ purchasing a code obfuscator etc?
I honestly would prefer something that does not have a loader etc. I know that it increases the chances of cracking, but I only want it to be a detrimental factor for them.
Thank you for your time.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（4）
我的经验是，这有点浪费时间。无论是否拥有您的源代码，人们都将能够重复您的工作。
恕我直言，这是一种错误的安全感
My experience has been that it's a bit of a waste of time. People will be able to duplicate your efforts, regardless of having your sourcecode.
It's a false sense of security IMHO
我还使用过IonCube。我发现整个过程相当简单。从在他们的网站上创建帐户，到下载和安装软件，再到购买许可证，一切都非常简单且轻松。
使用该应用程序也很简单。您可以告诉它要对哪些文件进行编码，甚至可以让它在每个编码文件中添加注释标头，以便您可以添加类似“此文件经过编码以保护版权。如有疑问，请联系我的公司...等”。 ”一个好处是它没有功能臃肿——它做到了它所说的加上一些不错的功能，没有不必要的复杂性。
IonCube 编码器还可以为您混淆非 PHP 文件，例如 Javascript 文件。您可以告诉它将编码文件本身放入一个新文件夹中，或者也将其他未修改的文件也一起复制，这样您就可以对项目进行“构建”。我发现这是一个很棒的交易，我可以继续使用它，而无需支付新的许可证费用，除非我想在另一台计算机上使用它或想要新版本。所以我只付了一次钱，现在已经用了三年了。
一般来说，编码器有几个缺点。 1-您无法再在“服务器上”编辑文件，尽管这无论如何都是一件坏事，但如果您无法访问计算机（例如您正在度假），它会阻止您进行紧急修复。
其次，如果您修改项目并添加要编码的新文件等...您必须更新 IonCube 项目的设置以包含需要编码的新文件。我想我只是发现添加的步骤有点烦人 - 但如果您需要保护您的代码并为您的用户提供 FTP 访问权限，那么这是值得的。
无论您使用哪个 IDE，您都可以使用此编码器，因为它是一个独立的应用程序。
我同意其他一些帖子的观点，即编码不是一个完美的解决方案，并且在某些方面违背了某些人的感受……但对我自己来说，它提供了一种思路。
I have also used IonCube. I found the whole process fairly simple. From creating an account on their website, to downloading and installing the software, and buying a license was all quite straight-forward and painless.
Using the application is simple too. You can tell it which files to encode, and you can even have it put a comment header in each encoded file so you can put something like "This file is encoded to protect the copyright. Please contact My Company for questions... etc." A nice things is that it does not have feature bloat- it does what it says plus a few nice-to-have features, with no unnecessary complexity.
The IonCube encoder can also obfuscate non-PHP files like Javascript files for you too. You can tell it to put the encoded files in a new folder by themselves or copy the other non-modified files along with it too, so you are kind of doing a 'build' of the project. I found that it was a great deal and I am able to continue using it without having to pay for a new license unless I want it on another computer or want a new version. So I've only paid once and used it for 3 years now.
A couple drawbacks of encoders in general. 1- you can no longer edit files 'on the server' which while that's a bad thing to do anyway, it prevents you from doing emergency fixes if you don't have access to your computer (like if you are on vacation).
Second, if you modify the project and add new files to be encoded, etc... you must update the IonCube project's settings to include the new files that need to be encoded. I guess I just find the added step a bit annoying- but worth it if you need to protect your code AND give your users FTP access.
You can also use this encoder regardless of which IDE you use, because it is a stand-alone app.
I agree with some other posts that encoding is not a perfect solution and in some ways goes against some people's feelings... but for myself it provides piece of mind.
我们的 SD PHP Obfuscator 可以混淆庞大的源代码系统，配置起来很简单对于混淆，为混淆的代码添加零开销，并且不需要任何特殊的加载器或目标系统的配置（目标系统运行您的软件，就好像它没有混淆一样）。
对于小文件，混淆的价值有限。但是，我们都同意保护小程序是一个愚蠢的想法。
对于大型文件系统，跨文件名加扰使得重建源非常困难。不要让人们告诉您他们可以轻松地对此类应用程序进行逆向工程；询问他们这样做的具体经验、应用程序有多大（文件数量）以及他们花费了多长时间。即使有注释，传统代码也很难理解。混淆的代码更糟糕。
请按照注释回复对原始问题的评论：精心设计的混淆器（包括 SD）不会破坏您的代码。
Our SD PHP Obfuscator can obfuscate giant systems of source code, is straightforward to configure for obfuscations, adds zero overhead to the obfuscated code and doesn't require any special loaders or configuration of the target system (the target system runs your software as if it weren't obfuscated).
With small files, the obfuscation is of limited value. But then, we all agree that protecting a small program is a silly idea.
With large systems of files, the cross file name scrambling makes it very hard to reconstruct the source. Don't let people tell you they can easily reverse engineer such applications; ask for them for their specific experience in do such, how big an application (file count) and how long they spent. Conventional code is hard enough to understand, even with comments. Obfuscated code is a lot worse.
Follow on note in response to a comment on the original question: well designed obfuscators (including SD's) don't break your code.
我用过 ionCube，我喜欢它。它运行得更快并且可以很好地混淆代码。它适用于Linux和Windows，涵盖了大多数服务器平台。
唯一的缺点是，由于许可的原因，您不允许自动编码，所以我认为您不应该将其编写到 CVS 或 SVN 提交后的脚本中。
I've used ionCube, and I like it. It runs faster and obfuscates the code reasonably well. It works on Linux and Windows, which covers most server platforms.
The only downside is that, due to the licensing, you aren't allowed to automate the encoding, so I think you aren't supposed to script it into your CVS or SVN post-commit.