Advertisement
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Discussion How to secure plugin code?

Comments in 'General Discussion' started by must_, May 2, 2014.

?

Do you hate people who cheating with code?

  1. Of course

    87.0%
  2. No

    13.0%
  1. Elmo
    Offline

    Elmo Active Member

    Joined:
    May 9, 2014
    Posts:
    65
    Minecraft User:
    optrusty
    Why dont u just compress it in a zip and put a password on it
  2. Elmo
    Offline

    Elmo Active Member

    Joined:
    May 9, 2014
    Posts:
    65
    Minecraft User:
    optrusty
    But that wouldnt be secure enough would it
  3. PEMapModder
    Offline

    PEMapModder Notable Member Plugin Developer

    Joined:
    Oct 9, 2013
    Posts:
    7,294
    Plugins:
    11
    Minecraft User:
    PEMapModder
    It would. Too secure that the plugin loader won't be able to unzip it. Or if it could, the user, if clever enough (like me xD), can just modify the plugin loader's source and make it dump the source code into a plain file on the disk.
  4. PEMapModder
    Offline

    PEMapModder Notable Member Plugin Developer

    Joined:
    Oct 9, 2013
    Posts:
    7,294
    Plugins:
    11
    Minecraft User:
    PEMapModder
    The ultimate method to secure plugin code is to make a way that the loader doesn't have to reverse the plugin back to source code before loading so that only a genius (which means nobody on this forum) can get the source. Or, something like assembled native C like that in MCPE Android. This way made it impossible to reverse into the original code, or even if possible, impossible to be same as original. As I had said before, the only non-source-code thing that PHP engine can read is compiled binaries.

    Or maybe extensions too, but it is not applicable in all platforms.
  5. ServerKart_Rod
    Offline

    ServerKart_Rod Active Member Plugin Developer

    Joined:
    Jul 7, 2014
    Posts:
    110
    Plugins:
    1
    Minecraft User:
    Advocaite
    at this time it is impossible due to fact no plugins are allowed to have custom extensions I can safely encode all my plugins and none can get source as its compiled into byte code and what not there is many encoders out there but due to plugin limits or rules you are forced to open source them.

    one way is minify the php and obfuscate it, but then cause mod reviewers can read your code they wont accept them.
    just face it you can never protect your code ever.
    Below what real encoded stuff looks like
    Code:
    HR+cPtW48F4fWfd6C12rqhw6AubGLDvQCdBt1xQynr5Vj5Ch2c9+RPbdjeeluUIWKYo8EENe+kJx
    IjsAa4YlFe67R5p13AvriW3Zc7nTQixtiwVfKag7ESpdTTBrhjiv7LZu5jBxDVqPCxmFs7n+VeTb
    EQubc+IkXLAVMfttp7hul3VcWWIaZrYPJ2OufZAIPjm213N6O4cinAQ4EHom49AcSy/mqKvqwfA3
    GFi2c6MjQa0TL4drHrYs0sNHIqfaXpIjmB4BUn2iuT0ABS/3jfupfWes6G6ZM2ooQfWEZhR6b76t
    2BahGHBr11Shi5pir5MknivbdWVkzJr+blFWjZ7sMOGG6DqkSfb9pYM+Hhf7Zcq/0FRLVgcws33G
    gA+12h6BVVMWAMzcdqQIOUqhGDEJ5jM4gZ9lFRUVDOQjU53DZwenbQaly9PLYqR3Tv9c0Hs5wJxc
    sSMww/6mtgTzhu/UV5DN/r6QaUeBL9Vizz2tE/OQokx3EUWZfo3wASNbgmuLFfeMnfIiu6fqmeNd
    HGoEcjbG86ac3Ye6+6SA7UKsMkhZotrYkP7Xr7d3TwAj7FMo4o4h46CSaZzrh628CeQ15gZDkAEz
    +jaIwffL6wZLeHsRA5BxIDIe1DpAKUMqa41UQfYAMWb4Jo1zMuJYycXLx4eNiQ3CdC+gnzsR859F
    KpRX8vi2d+CN0aHYoQjllaUf831ULxS9RQnXgDOw3wFLARK/bP1WvHICYrNkT+NFReKcUD+yHfzn
    223oPI6fPbU3cT7qZYaqMekQe+XhavUsMS0oMg82/6+O1H9dJZwFIqLh2/dcqI0r+XrGWqrr74iL
    
    @PEMapModder figure this out then smarty party ;)
    Last edited: Jul 16, 2014
  6. PEMapModder
    Offline

    PEMapModder Notable Member Plugin Developer

    Joined:
    Oct 9, 2013
    Posts:
    7,294
    Plugins:
    11
    Minecraft User:
    PEMapModder
    I have no idea ;) but you can submit an obfuscated version, then PM the reviewer the readable code.
  7. ServerKart_Rod
    Offline

    ServerKart_Rod Active Member Plugin Developer

    Joined:
    Jul 7, 2014
    Posts:
    110
    Plugins:
    1
    Minecraft User:
    Advocaite
    defeats the purpose of closed code dose it not? ;)

    So as i said closed code is not a option really when you have to show it in its original source at some point. the reviewer should check all commands make sure they work and then if do approve, and not worry about wether there fast or slow if you want to worry about that just offically code all plugins from official pocketmine team via request and get rid of all non approved coders to get approved submit pull request via git or something.

    My take on it is there way way to strict on plugin devs. but hey everyone has a opinion weather or not its granted or not we are all entitled to that ;)
  8. PEMapModder
    Offline

    PEMapModder Notable Member Plugin Developer

    Joined:
    Oct 9, 2013
    Posts:
    7,294
    Plugins:
    11
    Minecraft User:
    PEMapModder
    You are crazy
    ...

    But anyway they also have to check and get rid of malicious plugins too.
  9. ServerKart_Rod
    Offline

    ServerKart_Rod Active Member Plugin Developer

    Joined:
    Jul 7, 2014
    Posts:
    110
    Plugins:
    1
    Minecraft User:
    Advocaite
    people actually try that 0_O where is the ban hammer/ null route for those people
  10. Elmo
    Offline

    Elmo Active Member

    Joined:
    May 9, 2014
    Posts:
    65
    Minecraft User:
    optrusty
    OR... U can hide the plugin in a picture nobody can ever decode it. The best part u dont need to change the extension, but the sad part is u have to do this all on....
    WINDOWS! I will give u the steps
    1. Via CMD go to the dir where the plugin is and make a random picture or any file in that dir
    2. Now type copy /b ANYFILE.EXT + plugin.php ANYFILE.EXT
    3. There should be a new file in the directory
    4. Once u do that post the new ANYFILE.EXT
    5. This is experimental I have opened the picture with 7zip successfully but I have never tryed this
    6. Post the result if it works
  11. PEMapModder
    Offline

    PEMapModder Notable Member Plugin Developer

    Joined:
    Oct 9, 2013
    Posts:
    7,294
    Plugins:
    11
    Minecraft User:
    PEMapModder
    What?
    iJoshuaHD likes this.
  12. Elmo
    Offline

    Elmo Active Member

    Joined:
    May 9, 2014
    Posts:
    65
    Minecraft User:
    optrusty
    U can read it Its up there ^
  13. PEMapModder
    Offline

    PEMapModder Notable Member Plugin Developer

    Joined:
    Oct 9, 2013
    Posts:
    7,294
    Plugins:
    11
    Minecraft User:
    PEMapModder
    Does it work on all operating systems?
  14. iJoshuaHD
    Offline

    iJoshuaHD Notable Member Plugin Developer

    Joined:
    Nov 7, 2013
    Posts:
    1,167
    Plugins:
    4
    Minecraft User:
    iJoshuaHD
    he said it only works for windows.
  15. PEMapModder
    Offline

    PEMapModder Notable Member Plugin Developer

    Joined:
    Oct 9, 2013
    Posts:
    7,294
    Plugins:
    11
    Minecraft User:
    PEMapModder
    Then how do people use this?
  16. Elmo
    Offline

    Elmo Active Member

    Joined:
    May 9, 2014
    Posts:
    65
    Minecraft User:
    optrusty
    You use it like a regular plugin, but this is experimental I have not tested it yet
  17. Elmo
    Offline

    Elmo Active Member

    Joined:
    May 9, 2014
    Posts:
    65
    Minecraft User:
    optrusty
    I think you would need to load it with plugin loader
  18. PEMapModder
    Offline

    PEMapModder Notable Member Plugin Developer

    Joined:
    Oct 9, 2013
    Posts:
    7,294
    Plugins:
    11
    Minecraft User:
    PEMapModder
    And what exactly is the plugin loader?
  19. Elmo
    Offline

    Elmo Active Member

    Joined:
    May 9, 2014
    Posts:
    65
    Minecraft User:
    optrusty
    In the plugin section
  20. Elmo
    Offline

    Elmo Active Member

    Joined:
    May 9, 2014
    Posts:
    65
    Minecraft User:
    optrusty
    I will find it for u guys

Share This Page

Advertisement