Printable View
Hi.
I am using Installshield 2.11 to create my vb setup cd.
I want to limit number of installation maximum to 5 times for my client, from given setup cd.
Do i have to use any dll files or registry entry when first installation is done.
I really have no idea
Waiting for anticipation
Good luck. This is the question which has been facing people for years. In short there is no way to do it. You can make life hard for them, but you can't really stop it.
Pinky98 is right, there is no way to totally restrict such a thing. But you can write the number of instalations somewhere ppl don't expect. Somewhere in registries but with a name that has no relation to your application, or in some file in that is created in Windows directory. A good ideea is to encrypt this data so it's even harder for some one to make any connection to your application and this file. Anyway if he has another applications to see last modified files and registry entries than your doomed :) Good luck!
This still only controls the number of instalations on a single PC.. Best way is to write in unlocking Keys.. Keys not entered -- no App.. Just finished a app with this..Quote:
Originally Posted by vma
If wanted i can build an example app and source and post..( PS same keys do not work on different systems..)
Gremmy
I just some days ago answered a similar post giving some ideas to that theme you can read this http://www.codeguru.com/forum/showthread.php?p=1267651#post1267651
Hope that helps a bit
but even then... a simple format and they can re-install the software.Quote:
Originally Posted by vma
of course, that's why I said: there is no way to totally restrict such a thing :)
Yes thats true, but as it was also said by someone, you can mke it a bit more difficult to to for them who wants to have costfree use of others work.Quote:
Originally Posted by vma
Jonny Poet
Hi,
I am not agree with replyies you have got so far. See, you have a way to restrict the no of installation on same pc as well as no of client installations of server program.
Logic for this is :
1] For restricting No of installations on same pc :
You can insert blank form for taking input for no of instances. on same pc, just link the exe not dll with public parameter for No of instances. As soon as you fire any event (like Next Click or else) you have to just execute that exe which will generate registry entry for instance. While uninstallations, do not remove related reg entry thats all. In each installtion, you can check for existance of reg key and value, so if present you can ad it else create it with value 1.
If you have ever used clinent limitation ligic for server program, you will get to understand this logic.
please feel free to revert or doughts on area11@rediffmail.com with specifying sub starting with "CODEGURU MEMBER - "
Thanking You,
Regards,
Nitin T.
Dear Nitin, If I re-install the Client PC , then where is your registry entry for validation ?
Dear.. !
Nitin T, sorry if I am mis-understanding you but your post was very hard to understand...
I disagree... your method is probably one of the simplist ways to create a system that can be cracked. All I need to do is write a program that watches writes to the registry. Then re-create the writes for additional installs. Plus, I can still simply re-install my machine.
As for having a client that needs to contact a server, simply place a network sniffer on your machine, and watch for calls. Then setup a new server which mimics the actual server.
But as told before, also in that case user can format his HD and can install it again. ( For example if you give people a time limeted offer to test your program if the user really wants to use without payment in the end by using FDisk and new windows setup he could again use your program.) It is a told, you can make it hard for the user, but you cannot make it really impossible for him.Quote:
Originally Posted by area11
hi,
i just wanna ask that if the hardware signature of any pc can be retrieved by any API? If so, then the no of installations can be limited by applying a check on the hardware signature(like the processor model number,etc.)
i don't really know whether this works out.
yes, you can retrieve a hardware "stamp". Normally ones gets any of mac address, primary HDD key, and Primary CPU key, or combination there of.
But, once you have the keys want do you want to do with them? Obviously, if you know them before-hand you can limit the prog to work only on the machine with that key. But, even this isn't fool proof. Many new network cards allow you to dymanically change the MAC... plus a rather simplr hack can get around this too.
Yes but only if anybody knows what you are using. If you are using HDD number, CPU key and your pgmy version number you can create a key like 'AQC%-RTCP-8IOLW' something like that. Read the thread which I pointed out in post no 5 ( this thread ) I have described such a solution. But this needs to be switched free on your server.Quote:
Originally Posted by Pinky98
Jonny Poet
To have a conclusion: No one and I mean NO ONE has ever succeded an imposible to brake application. I'm never bought anything on my comp. I have WinXP SP2 cracked, I have Photoshop cracked, I have Maya, I have SQL Server, AutoCAD and a ton of games, all cracked and I can get any soft I want in less than 24 hours. If these companies didn't found a way to restrict this yet I say it's impossible to do such a thing.
At least for the moment! :)
Using this little bit of code with modules i got somewhere (Maybe on CG) i put together this code snip.. Not perfect but workable.. Instalation is limited by YOU.. creates a key that the user has to send to you.. You can verify details and send back a unlock key.. I used Bit byting, byte subsitution for the keys, and Xor for encryption... the three most basic coding methods around, Simple but effective...Quote:
Originally Posted by pangolin_10
Sample prog will take inputs, Create a 40 digit key (Case sensitive).. Then reverse the key and return id and user details from the key , and supply an unlocking key..
this is far from a perfect method.. but the normal Hardware Teckies and some of the Software Teckies wont be able to fool this..
Gremmy
100% agreed with you as i done it already with a software system developed for School Management System.Quote:
Originally Posted by GremlinSA
My cousion is useing a program that uses a floppy disk for protection you can set how many times they install from a floppy then when they have used up their times use a debug command to format track 0 of the floppy ,I dont know how to do this but i think it will work
Hi !Quote:
Originally Posted by duplincomputers
I dont even have anymore a floppy on my computer nor on my laptop.
This is old technology and is I think gone down the river. You cannot transfer this technique to a CD because this technique was based on the idea to store the usage in track 0 as a byte and before satrting copying ,checking there if its allowed
Jonny Poet
This method is a bit Mute.. Most new computers dont even have a stiffy now.. With network conectivity, I've installed systems that dont even have CD Rom's, to limit the user from only using what's available on the network...Quote:
Originally Posted by duplincomputers
Also i dont think the client whould apreciate getting a proggy on CD and a installer Stiffy disk..
Then theres Disk Image.. Make 30 Image copies of the stiffy and you have 30 installers..
It worked in its day (10 years ago), but with users getting wiser today.. it's just no good...
Gremmy.
You can protect your application by using new technology, like usb card and packed with THEMIDA or other packer.
regards
But this incurs the extra cost of Purchasing and programming the USB Dongle to work with the application..Quote:
Originally Posted by ulymar
And the additional Tech support now required to mantain them.. ( I've Picked up some problems with different brands of USB memory sticks where you can only use one or the other, as the Drivers conflict with each other)....
Gremmy....
I would be interested in getting a copy of this program attached to Post # 17 for either C# or Visual Basic .Net. I am really interested to see how it works because I am looking for this exact thing for one of my program I will be distrubiting soon.
I no longer have Visual Basic 6.0 and even if I did I don't remember how to use the language so the current example doesn't do me any good.
Is there a way to run this project through Visual Studio and convert it, at least, to Visual Basic .Net?
Yes, you can open a VB6.0 project in VS.Net but it would convert it, from thereon you could try fixing the errors which is usual when a VB6.0 project is converted to .Net.
I got it open with express edition and there were too many errors for me to worry about. Does anyone know of any newer key programs like that? Something written for C#? I have been searching for lock/unlock programs but I haven't found anything useful.
The one I use to use got the Windows Product ID and used that to generate the lock and unlock codes, but it doesn't work anymore on Vista without being modified and it does not work on 64 bit Vista at all.
I'd like to get a lock program that does not depend on Windows to work and it looks like getting the hard drive, and other hardware serial numbers is a big PITA. I don't think you can do it stright from C# witout importing all kinds of Win32 libraries. At least that's how all the examples I've seen work.
The Net language has built in encryption libraries that VB6 couldn't even think of.
They have classes for just about everything that you could think of. You can use any of them in your VB.Net or C# programs, with the syntax being slightly different for each flavor.
http://www.example-code.com/vbdotnet/encryption.asp
There is one and only one (very very nearly) foolproof way to protect your software....simply do NOT distribute it.
This may seem silly, but it really works. If your software resides 100% on a machine that YOU (and only you or trusted associates) control, then you can achieve the goal.
Keeping the software on a centrally controled server and only allowing "Terminal Services" access to it is becoming more and more common for critical secure operations.
In addition to virtual preventing unauthorized use, it also nearly eliminates all attack surfaces for hacking.
note to vma: Your account and other information has been forwarded to SPA
Most of my clients are not super hackers so a simple program key works great for me.
The other point is that if you have sold your program to someone in Timbuktu, and received good money for it, what do you do when they call up and tell you the computer had to be reformatted because of viruses, or the HD was upgraded, or the memory was upgraded, etc, etc
I suppose you could always tell them you dont believe them, and tell them to send you another cheque .... would you ????????? Not likely unless you are some idiot.
However, if I did have to seriously protect myself from someone unlawfully using my software, I would do the following
1) Inform the client that because of high security concerns, the program will not function unless they are connected to the internet (at least at starting up the program)
2) When the program starts, it either makes a connection to your own web site / server and passes information about the a) User b) Computer running your program (of course it can send you the serial number of the program being run also)
You then have an option to let them run the program (by sending back a confirm code which you program understands) or you can stop the operation - even uninstall / delete the program (or critical parts of it)
The offender would then be flagged so if they attempt to restart the same serial number program, it just would not work
This way you would not only protect unlawful use of you program but you would also know exactly who uses you program and when
Neat! I had this exact same idea but I thought it was stupid. But you just thought of the same idea so it must not be that stupid after all.Quote:
Originally Posted by George1111
I don't think I would delete/uninstall the software for them because the could make way to legal action against my company. But what I can do is say "Internet Connection Required" on the box of the software, and on the disc. This is not uncommon because today if you don't have the Internet something is seriously wrong. If they have security set up on a network for connecting to the Internet they just have to allow my program.
I will sell the program for a flat price, and then charge them a yearly fee for .. download upgraded versions or usage license. I'll figure something out. That way, they have to check with my database when the program starts up (or even everyday at midnight, in case they never shut the program down). If they don't pay me I can simply go into my database and set the "inactive" bit in the table for their product, and they can't use the program anymore, or at least only use some features of it.
I could send several renewal notices to them prior to cutting them off so if they get cut of, they were warned.
I think this sounds more secure then a lock/unlock code. I know there is probably a way to hack it but, you can hack anything now days.
So, the first upset customer would find a way to hack the server, or take it down...