Protect Javascript from being ripped of .. How-to ?

crazyhorse · 09-08-2004, 06:50 AM

http://scriptasylum.com/tutorials/en...t_encoder.html

crazyhorse · 09-08-2004, 06:55 AM

http://gosu.pl/demo/JavascriptDecode...ptDecoder.html

samer · 09-08-2004, 10:27 AM

yes but the guy still copy / past it to his website ... i think this is impossible

**LazyJim** · 09-08-2004, 04:59 PM

deterants are all u can really do i think.
maybe try...
make sure it's a linked .js file but change the extension to PHP (or asp or whatever u use) and make the PHP file check for the HTTP Referer, that it is your site, not an empty string, and then print the script, else print a message saying pls don't view my code!

and all your code should be wrapped in functions, and the should have a toString() method attched that returns a message "protected code" or something like that.

U can get past it if your browser has a "set fake referea header" option though :/

hey maybe get PHP to store it in a secure cookie and make another script to pull it out and run it. (don't forget the .toString() thing though!)

like I said - all just deterants I think.

samer · 09-10-2004, 05:23 AM

thanks for the advice LJ

JackyBrown · 12-14-2007, 03:16 AM

Hi

,
I create more progressive JavaScript Encoder, working at once with several algorithms

searchbliss · 12-14-2007, 11:07 AM

What has helped me in the past is to call an external js file, that calls another js file. Then I encrypt them both, so if the first js file is viewed, it is calling the real file (but encrypted). The real file is also encrypted (in case). Most would just give up after the first.

isaak · 03-11-2008, 03:26 AM

Don't use any of the JavaScript encoders, they bring a high overhead with them and you scripts will function much slower. Probably the best way is to create a php script using header(), and checking the referer or you can put your javascript folder on a non-web accessible location so your files will be able to load them but users won't be able to view your JavaScript code. Professionals can easily find a way through this though.

Bagi Zoltán · 03-13-2008, 05:12 AM

I think the strongest protection can be implemented via .htaccess.
As first step please place the javascript codes into external js files and insert this into your .htaccess file.

Code:

RewriteEngine On
RewriteCond %{HTTP_REFERER} !^http://(www\.)?yoursite.com(/)?.*$ [NC]
RewriteRule .*\.(js)$ http://yoursite.com/ [R,NC]

It will redirect every javascript spy try to the homepage (specified at the second line).