Frequently Asked Questions
- What is ScriptLock?
ScriptLock is both a PHP script encoding and licensing web service. It is designed for PHP application developers and software vendors, to protect your Intellectual Property. You can use ScriptLock to encode and license your scripts to as many customers as you like.
- How does the ScriptLock Encoder work?
The ScriptLock Encoder works by creating a self-decoding PHP script. This script is written in 100% pure PHP, and will run on any vanilla PHP (>= 4.3.0) server installation. Your customers will not require any special extensions or PHP modules enabled. The only requirement is for allow_url_fopen to be enabled on your customer's server - which it is by default. This is necessary for the ScriptLock Licenser to dial home to the ScriptLock licensing servers for licensed usage verification.
Your source code, which is embedded within the encoded script, remains encrypted until the ScriptLock licensing servers verify that your software is licensed to run on the calling server.
- Is it secure?
Your embedded source code is encrypted with a highly secure encryption algorithm in cipher-block-chaining (CBC) mode. And because the decryption key is NOT stored within the encoded script, it is highly improbable that it can be cracked. And it certainly won't be trivial, without the decryption key.
ScriptLock encoded scripts must dial home to the ScriptLock licensing servers to verify that your software is licensed for use on the calling server, before your embedded source code can be decrypted and executed. Even if a determined cracker is able to bypass the license server verification process, your embedded source code remains 100% secure because it cannot be decrypted without the license check being approved.
ScriptLock also incorporates several anti-tampering devices to prevent your software from being tampered with. If the encoded script has been tampered with, your software will cease to operate on the installed server.
- How does the ScriptLock Licenser work?
-
Unlike other PHP encoding software, ScriptLock does not embed software license information within the encoded scripts. Licensing information is stored only on the ScriptLock licensing servers and, therefore, cannot be forged. Encoded scripts must "dial home" to the ScriptLock License Verification server to validate that your software is licensed for use on the calling server's domain or IP address.
If your software is NOT licensed for use on the calling server, the encoded script will proceed to lock out further access to your software.
A significant advantage of decoupling the software licensing from the encoder is that the SAME encoded script can be deployed on multiple servers. Another HUGE advantage is that licenses can be managed separately to your application. You can automatically renew or upgrade customer licenses from time-limited trials, change the license terms or expiry, and, if necessary, revoke or temporarily suspend licenses.
- What if my application software is not written in PHP?
You can use the ScriptLock Licensing web service API to verify that your software is licensed to run on the calling server. Please see the API docs for further information.
- Can I just use the ScriptLock licensing features?
The ScriptLock Licenser is designed to work separately from the encoded script. Please refer to the API docs for more information.
