Envato activation API & File encryption

This is really a very major and serious problem

The same thing is gonna happen to me / any other author, not that i have posted any app here on codecanyon yet, but i am really working hard for my application and i know that as soon as it’s made available for purchase, Some one (some buyer) will purchase the app and make it available online for FREEEEE !!!

Since you mentioned of 1 warez site, there are hundreds others, one for ex would be scriptmafia…...

The encryption and activation system used by WHMCS (www.whmcs.com) is one of the best out there, eventually they (hackers) nulled this app as well, but it took them lot of time (i have seen many forums with discussions related to whmcs – not that i promote anything or use warez…)

It would be really great if envato implements something like this (activation system) here…, Also It would be really great if few authors get together and develop something like this paid or free…,

Though i will definitely implement some security before releasing my application, but not yet sure what security to implement.

The “Warez-Scene” is not a specific website, it means:

Oooh, Ok. I get it

What i ment was even though we encrypt the file, it can be decoded, so thats not the complete solution.

If we implement Activation system someone will remove it..easily…, But that doesn’t mean we shouldn’t.

I Really have no idea how to safeguard the app, the only way i can see is to make a hosted application and not share it’s code.. otherwise make it open source

Even with hosted application, once it becomes famous hackers will hack it, they might hack the server and copy all the files/codes…, so still no Complete Security.

In short no matter what authors do, somewhere on www their application will be available for free, it’s just a matter of time when users (potential clients) discover it.

Already working on this .

It actually fairly simple. Just ask the user to input their username and API key. Run a compare-search to see if their purchased items your application exists. If it does, go through with the install, if not… well.. don’t install it.

An additional check would be to ensure that only one user per one installation exists. Upon a successful install, you should have it send an email with JUST the username of the user to your email address. That, or update an online web app.

In all honesty, the fact the Envato is seems so closed and protects the buyers of products behind a wall of secrecy discourages me from releasing full scale web applications. Letting Envato know about the sites that release it doesn’t seem to get me anywhere either. I just get the same response, “Issue a DMCA form to the illegal party.” That never works… and I really don’t want to give my personal information to someone downloading my content illegally already.

You can’t prevent that from happening. You said you got 2000 downloads in the sharing website. That’s good, but you won’t get them as sales even if the free pirated one doesn’t exist. People who are ready to pay, are already doing it. People who uses warez will always keep using it.

Fighting them is useless in my opinion. Big companies like Microsoft and others have already failed at it. I think, we should find some new kind of competitive advantage for the user who did have a purchase.

The scripts sold on this website are relatively nothing compared to a operating system. So I don’t think people are willing to spend allot of time decoding and nulling scripts available on this marketplace.

The scripts are small so they are pretty easy to null, after all even they are programmers (sometimes even better than us)

And, why would they null relatively small scripts present here???? Thats because Envato is BBBBIIIIGGGGGGG

BTW , i don’k think they null any scripts present here, as none of the scripts available here have any type security built into them (it’s a different thing that even my app wouldn’t have any top notch security built into it )

I don’t think any one can do anything…, because even if someone creates an app to secure other apps, someone will null the very same app…

@siredesigns

It actually fairly simple. Just ask the user to input their username and API key. Run a compare-search to see if their purchased items your application exists. If it does, go through with the install, if not… well.. don’t install it.

That’s great, but what if someone replaces the installer with different one (their own) what to do then??