| View previous topic :: View next topic |
| Author |
Message |
Tomas R.
Guest
|
 Posted: Mon Aug 16, 2004 2:16 pm Post subject: ISAPI protect |
 |
|
Hello,
We have made isapi application and now ready to install it on client server
but
somehow we need to protect it. Is it possible to protect ISAPI module
against copying it and installing on other server?
As I understand ISAPI module can't access registry due to limited rights. Am
I right?
--
Best Regards,
Tomas
|
|
| Back to top |
|
 |
Del Murray
Guest
|
| Posted: Mon Aug 16, 2004 3:02 pm Post subject: Re: ISAPI protect |
|
|
ISAPI can access registry if it is given permissions. You could put an HTTP
client in the ISAPI. When the "OnCreate" event of the ISAPI fires, (which
only happens once), it could go to a website you control to see if it is
authorized for the server (hostname) that it is running on. If not, it
doesn't continue running. Or you could burn the hostname into the program
before you install it. If they change hosts, they just call you for a new
version.
|
|
| Back to top |
|
|
Tomas R.
Guest
|
| Posted: Mon Aug 16, 2004 3:40 pm Post subject: Re: ISAPI protect |
|
|
Del you have suggested great idea about hostname ! :)
"Del Murray" <Del.Murray (AT) CreditHawk (DOT) Net.NoSpam> wrote
| Quote: | ISAPI can access registry if it is given permissions. You could put an
HTTP
client in the ISAPI. When the "OnCreate" event of the ISAPI fires, (which
only happens once), it could go to a website you control to see if it is
authorized for the server (hostname) that it is running on. If not, it
doesn't continue running. Or you could burn the hostname into the program
before you install it. If they change hosts, they just call you for a new
version.
|
|
|
| Back to top |
|
|
Del Murray
Guest
|
| Posted: Mon Aug 16, 2004 7:49 pm Post subject: Re: ISAPI protect |
|
|
No problem, just mail 3 Million dollars.
|
|
| Back to top |
|
|
Mat Ballard
Guest
|
| Posted: Mon Aug 16, 2004 11:45 pm Post subject: Re: ISAPI protect |
|
|
Del Murray wrote:
| Quote: | ISAPI can access registry if it is given permissions. You could put an HTTP
client in the ISAPI. When the "OnCreate" event of the ISAPI fires, (which
only happens once), it could go to a website you control to see if it is
authorized for the server (hostname) that it is running on. If not, it
doesn't continue running. Or you could burn the hostname into the program
before you install it. If they change hosts, they just call you for a new
version.
|
if someone is clever enough (or your webserver is poorly enough set up) to get
their hands on your DLL, then a little bit of hex editing won't phase them at all.
a better solution is a config file or registry section with an encoded password,
cheers,
Mat
|
|
| Back to top |
|
|
Tomas R.
Guest
|
| Posted: Tue Aug 17, 2004 10:57 am Post subject: Re: ISAPI protect |
|
|
| Quote: | No problem, just mail 3 Million dollars.
done, check account... |
|
|
| Back to top |
|
|
Del Murray
Guest
|
| Posted: Tue Aug 17, 2004 3:45 pm Post subject: Re: ISAPI protect |
|
|
He can encrypt the hostname within the DLL and no one will see it and he
still wont have to read/write the registry
|
|
| Back to top |
|
|
AdamStefanCosta
Guest
|
| Posted: Tue Aug 17, 2004 6:26 pm Post subject: Re: ISAPI protect |
|
|
Del
Have u a good encryption algoritm/component?
Tnx in Advance
AdamStefanCosta
"Del Murray" <Del.Murray (AT) CreditHawk (DOT) Net.NoSpam> wrote
| Quote: | He can encrypt the hostname within the DLL and no one will see it and he
still wont have to read/write the registry
|
|
|
| Back to top |
|
|
Mat Ballard
Guest
|
| Posted: Tue Aug 17, 2004 11:40 pm Post subject: Re: ISAPI protect |
|
|
AdamStefanCosta wrote:
| Quote: | Have u a good encryption algoritm/component?
|
DCPcrypt Cryptographic Component Library
http://www.cityinthesky.co.uk/
cheers,
Mat
|
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
