CN101206702A - WEB source code protection technique - Google Patents
WEB source code protection technique Download PDFInfo
- Publication number
- CN101206702A CN101206702A CNA2006101243468A CN200610124346A CN101206702A CN 101206702 A CN101206702 A CN 101206702A CN A2006101243468 A CNA2006101243468 A CN A2006101243468A CN 200610124346 A CN200610124346 A CN 200610124346A CN 101206702 A CN101206702 A CN 101206702A
- Authority
- CN
- China
- Prior art keywords
- web
- software
- website
- source code
- backstage
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Abstract
The invention relates to a web source code protection technique which does not use the prior single web development tool to compile but uses over two (comprising two) development tools to compile and fully utilizes advantages of various development tools to protect web source codes. For example, the prior web background and foreground development adopts web development tools to compile, thereby source code confidentiality is weak. Direct control capability of the prior software development tools (such as VB, VC and so on) on WEB is weak. Due to certain interoperability of two varieties of development tools, the two development tools are combined with each other to be recompiled into application software capable of effectively controlling a web website by certain means according to the prior web website writing thought.
Description
Technical field;
The present invention is the anti-piracy method of a kind of WEB application system, and it is mainly used in the source code protection of internet site.Belong to the internet, applications scope.
Technical background:
Present web site software generally adopts ASP, PHP, and web developing instruments such as Java are write.Because internet self, these web (both webpages) source code all is disclosed.
Existing source code protected mode is the number order statement that utilizes developing instruments self such as VBScript, javascript to support; before the web station system operation, code deciphering rule is set, run to when encrypting partly again according to the deciphering rule deciphering of setting.Because its encryption rule must be disclosed, therefore, source code is encrypted partly and also can be easy to obtain by simple order.
In web safety, system vulnerability is easy to be found by reading source code, thereby is utilized by the hacker, causes the tremendous economic loss of web website;
Aspect business promotion, owing to disclosing of source code, and cause copyright to be effectively protected, the bootlegger is easy to remove the source code copyright information according to for existing, causes economic loss for web system development merchant, has a strong impact on the business promotion of system.
In addition, existing WEB system can't limit the user system only is applied to one or limit the number website.Legal user can be applied in it any a plurality of website, also can freely transfer the possession of sale.Tackle this problem, the web system generally adopts the registration code protection at present, but practical function is very little.General software registration sign indicating number generally adopts fixed sequence program number, machine code to come verifying software, advanced slightly any be based on SN number that is retained in advance in the internet database, connect this database authentication during running software, if identical SN number two cover softwares use simultaneously, then wherein a cover software can't use; Yet, because the administration authority difference of the application system user (asu) of internet need be operated same website and database on multiple computers probably.Adopt these verification methods to make the user need buy many cover softwares and just can use, and use the result to have only one, caused the unnecessary financial burden of user.
Summary of the invention:
For overcoming above-mentioned shortcoming, the invention provides a kind of practicable web site software source code protection and anti-piracy way.Allow to use this system user same website of management or limit a plurality of websites on or multiple computers.
The present invention's technical scheme that is adopted of dealing with problems is:
Utilization to the WEB control ability more weak but source code protect preferably the software worker to send out instrument (as VB, VC etc.) will not have the core of the WEB system of source code protection partly to make amendment according to the compiling way of software development.Make full use of the advantage of all kinds of developing instruments, reach the source code protection of WEB system.
The source code of present web site software is compiled.Process is three steps roughly:
1, the web website generally comprises two parts in foreground and backstage.The foreground is owing to need by Internet-browser (as the IE of Microsoft etc.) net user can be browsed, so must adopt language compilation such as ASP, PHP, JSP according to the requirement of web, this part can not be carried out software translating.
2, the backstage partly is the core part of the whole web of control website.
The exploitation of existing web backstage equally adopts the web developing instrument to write with the foreground, and the source code confidentiality is not strong.Existing SDK (Software Development Kit) (as VB, VC etc.) to the direct control ability of WEB a little less than.Have certain intercommunity based on two class developing instruments, both are combined, write thinking, it is recompilated the application software that can control backstage, web website according to backstage, original website.
The web backstage comprises database part and non-database part.Based on the database of internet, developing instrument can pass through the data access control, according to the thinking of WEB system, to remote data base add, operation such as deletion, modification; But not data-base content and non-internet database, for example transmission of file, webpage What You See Is What You Get editor, access database etc.Utilization this method, utilize SDK (Software Development Kit) to pass through the web page access control, SDK (Software Development Kit) can't directly actuated content be shown to local computer, the operator is after local computer is with this part content modification, content is resubmited the server to WEB, and the reception program that server end is write with the WEB developing instrument transforms content to be used.
Uploading with file is example: at first write out based on the file of web server with the web developing instrument and receive program, call reception program on the web server with the SDK (Software Development Kit) coding then.The data of when operator uses needs being uploaded is submitted to local computer, and local computer calls the reception program, finishes uploading of file.
When 3, WEB system backstage is moved first, need site informations such as input network address, be the software identification code by the software built-in algorithms with these information translation, rather than adopt fixing software sequence number or hard piece number.During the software each run, the software identification code is sent to system development merchant server, if there is not this record in the database, this software identification code be will increase, and not registration, the operation of restricted software will be labeled as, after waiting for that the user imports number of registration, its restriction operation is removed.If this record is arranged in the database, then corresponding releasing running software restriction.Because the Internet address is fixed,, also only need a fixing network address since be that a plurality of network address are pointed to same website.Software information is fixed; thereby; utilize the unique property of the Internet address; no matter software is installed on several machines; its software identification code all is the same; thereby two computers can not occur and used a cover software to be restricted simultaneously, but can protect a cover system only to be applied to a website effectively.
When selling, the software backstage after source code foreground and the compiling is together sold.The foreground, website uploads onto the server and browses for the net user, and the backstage is installed on the stand-alone computer, the content of control website.Realize the protection of website source code, thereby reach the function that web station system is anti-pirate, increase internet self does not possess.
Embodiment;
My WEB source code protection technique is applied in the web system development.
When writing the source code of web System Management Daemon, I directly write without the web developing instrument.
With non-data-base content is example, and it is as follows to use the VB language expression instead:
Private?Sub?Form_Load()
Me.WebBrowser1.Navigate " the non-data-base content on the webpage "
Dim?vDoc1?As?Object
Dim?vTag1?As?Object
Set?vDoc1＝WebBrowser1.Document
If?UCase(vDoc1.All(1).tagName)＝″INPUT″Then
Debug.Print?vDoc1.All(1).Type
Set?vTag1＝vDoc1.All(1)
If?vTag1.Type＝″text″Then
my.Text＝vTag1.value
End?If
End?If
Next?k
Just caught " INPUT " content of appointment on the webpage this moment, and deposit in my.Text.Behind the editor my.text, finishing SDK (Software Development Kit) by Me.WebBrowser1.Navigate " server process data portion " again can't directly actuated content
Add up to and used 2 kinds of language, the web system has all been write.
The invention has the beneficial effects as follows;
Because we use SDK (Software Development Kit) to compile the web source code, security is improved, and the user friendly while, copyright has also obtained protection, and this just moves and promote and created good environment for the web system.
Use our web source code protection technique, can make web system development merchant extension system more relievedly;
In addition, because the system after the compiling runs on stand-alone computer but not the webserver, the function aspects in system can more freely increase many function restrictions that caused owing to the server restriction originally.
Claims (5)
1. WEB source code protection technique, its technical characterictic is; It is the anti-piracy method of a kind of WEB system, is mainly used in the source code protection of internet site.
2. WEB according to claim 1 system is anti-piracy, and its technical characterictic is; In same WEB system, write with the developing instrument of two or more (comprising two kinds), can make full use of the advantage of various developing instruments, learn from other's strong points to offset one's weaknesses, effectively protect the WEB source code.
3. multilingual writing according to claim 2, its technical characterictic is: the exploitation of existing web backstage is write with the same web developing instrument that all adopts in foreground, and the source code confidentiality is not strong.Existing SDK (Software Development Kit) (as VB, VC etc.) to the direct control ability of WEB a little less than.Have certain intercommunity based on two class developing instruments, both are combined, write thinking, it is recompilated the application software that can control backstage, web website according to original website.
4. backstage, control according to claim 3 web website, its technical characterictic is: the web backstage comprises database part and non-database part.Developing instrument can be by the database access control, the operation that thinking according to the WEB system is added, deletes, revised, and to non-data-base content and can not be applied to the database of internet, SDK (Software Development Kit) is by the web page access control, SDK (Software Development Kit) can't directly actuated content be presented at local computer, the operator is after local computer is with this part content modification, content is submitted to the WEB server, and server end is used the reception program of being write by the WEB developing instrument that content inspection is transformed and is used.
5. check according to claim 4 transforms to be used, its technical characterictic is: when the WEB system moves on the backstage first, need site informations such as input network address, be the software identification code by the software built-in algorithms with these information translation, rather than adopt fixing software sequence number or hard piece number.
During the software each run, the software identification code is sent to system development merchant server, if there is not this record in the database, this software identification code be will increase, and not registration, the operation of restricted software will be labeled as, after waiting for that the user imports number of registration, with its operation restriction cancellation.If this record is arranged in the database, then detect registration code, by then removing the running software restriction.
Because the Internet address is fixed,, also only need a fixing network address even a plurality of network address is pointed to same website.Software information is fixed; the Internet address also is unique property; no matter software is installed on several machines; its software identification code all is the same; therefore in the time of two computers can not occurring and use simultaneously; wherein a cover software is restricted, and can protect a cover system only to be applied to a website effectively.
When selling, the WEB system backstage after source code foreground and the compiling is together sold.The foreground, website uploads onto the server and browses for the net user, and the backstage is installed on the stand-alone computer, the content of control website.Thereby realize the protection of website source code.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNA2006101243468A CN101206702A (en) | 2006-12-22 | 2006-12-22 | WEB source code protection technique |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNA2006101243468A CN101206702A (en) | 2006-12-22 | 2006-12-22 | WEB source code protection technique |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN101206702A true CN101206702A (en) | 2008-06-25 |
Family
ID=39566891
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CNA2006101243468A Pending CN101206702A (en) | 2006-12-22 | 2006-12-22 | WEB source code protection technique |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN101206702A (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103814371A (en) * | 2011-09-26 | 2014-05-21 | 英特尔公司 | Simulation of Web applications and secondary devices in a Web browser, Web application development tools, and methods using the same |
| CN104077229A (en) * | 2014-07-04 | 2014-10-01 | 林章建 | Video recording software containing advertisement connection APIs |
-
2006
- 2006-12-22 CN CNA2006101243468A patent/CN101206702A/en active Pending
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103814371A (en) * | 2011-09-26 | 2014-05-21 | 英特尔公司 | Simulation of Web applications and secondary devices in a Web browser, Web application development tools, and methods using the same |
| CN104077229A (en) * | 2014-07-04 | 2014-10-01 | 林章建 | Video recording software containing advertisement connection APIs |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| JP6815385B2 (en) | Systems and methods for code obfuscation of applications | |
| RU2439669C2 (en) | Method to prevent reverse engineering of software, unauthorised modification and data capture during performance | |
| US20180260199A1 (en) | Method and apparatus for intermediate representation of applications | |
| CN100498712C (en) | Storage medium, method and apparatus for creating a protected executable program | |
| CN105683990B (en) | Method and apparatus for protecting dynamic base | |
| CN103176844B (en) | The changing method of a kind of IE6 kernel and novel I E kernel and system | |
| US8090959B2 (en) | Method and apparatus for protecting .net programs | |
| CN101779436B (en) | Tracking the origins of data and controlling data transmission | |
| US20170116410A1 (en) | Software protection | |
| WO2010077000A2 (en) | Method for separately executing software, apparatus, and computer-readable recording medium | |
| JP2009053740A (en) | System, method, and computer program for recording operation log | |
| US20150244737A1 (en) | Detecting malicious advertisements using source code analysis | |
| CN102592086B (en) | Method and device for browsing webpages in sandbox | |
| CN100468431C (en) | Download method for digital works of automatic binding mobile equipment | |
| CN114547558B (en) | Authorization method, authorization control device, equipment and medium | |
| CN105488400A (en) | Comprehensive detection method and system of malicious webpage | |
| CN106326691A (en) | Encryption and decryption function realization method and device, and server | |
| EP2937803B1 (en) | Control flow flattening for code obfuscation where the next block calculation needs run-time information | |
| CN110633073B (en) | Unity code obfuscation method based on Il2cpp compilation | |
| CN110309631B (en) | Programming language structure confusion processing method, intelligent terminal and storage medium | |
| O'Neill | Learning linux binary analysis | |
| CN106326733A (en) | Method and apparatus for managing applications in mobile terminal | |
| US20050289358A1 (en) | Method and system for sensitive information protection in structured documents | |
| Pan et al. | Advertisement removal of Android applications by reverse engineering | |
| CN101206702A (en) | WEB source code protection technique |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C02 | Deemed withdrawal of patent application after publication (patent law 2001) | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Open date: 20080625 |