Serial/Licensing system

[Jefrey]

Hi all

I've made a simple serial and licensing system (although we know we already lost the war against the crackers... mainly using AU3 with too many decompilers available for free). That's not as you're accustomed to see outside, but that's interesting (I think).

That's how it works:

There aren't automatic demonstration licenses. After installing, the software won't work (truly, it will ask for a serial). The client must contact you/your company in order to get a free demo key or buy a full key.

Yeah... the serial keys are quite big. That's made to copy and paste from the email sent from you to the client. It's the result of some informations encrypted, like how many days the serial key will work, a limit day to register using that serial (after that day, it won't be possible to register using that serial (if the user registered before, the license will still valid. Don't worry)).

The user ID that is used to generate the serial key isn't an user input, like his email. It's generated based in some computers informations, like CPU/OS Architecture and others. The user must sent this key to you, and you'll send back his serial.

But unfortunally I couldn't find a better way to save the license info. Actually, I'm using a file in %APPDATA% (encrypted and unreadable to look like compiled or a structure file, of course). If this file is changed or deleted, the application won't work and will require reinstallation.

The file below brings some examples and the UDF (very well commented... I guess). It's very easy to use. It has also a KeyGen to generate and validate your serials.

You'll need >Melba23's Extended Message Box UDF. Just download it and copy ExtMsgBox.au3 and StringSize.au3 from his UDF to the same folder with "license.au3" from my script. Or it won't work.

Download: license.zip

[Palestinian]

I remember needing something like this a while ago and couldn't find anything online, so I simply made my script require a username/password to login that I will be providing for users, when a user logs in it checks a website for his username and password and react according, no encryption or anything like that is included tho, I'll give your UDF a try, thanks a lot.

[alexutu2013]

Can someone update it , please ?? StringEncrypt don't work anymore...

[sahsanu]

Can someone update it , please ?? StringEncrypt don't work anymore...

 

As the code is public you could try to change it on your own. Just add on Keygen.au3 a new include (license.au3 uses this include already):

#include <Crypt.au3>

And on both, Keygen.au3 and license.au3 add a new function which acts as a wrapper for old _StringEncrypt() function:

Func _StringEncrypt($fEncryptDecrypt, $sData, $sPassword)
    _Crypt_Startup()
    Local $sResult = ""
    If $fEncryptDecrypt = 1 Then
        $sResult = Hex(_Crypt_EncryptData($sData, $sPassword, $CALG_AES_256))
    Else
        $sResult = BinaryToString(_Crypt_DecryptData("0x" & $sData, $sPassword, $CALG_AES_256))
    EndIf
    _Crypt_Shutdown()
    Return $sResult
EndFunc   ;==>_StringEncrypt

Note 1: The new encryption is not compatible with the encryption used in old _StringEncrypt().

Note 2: I don't use this UDF so I did not test it.

Cheers,

sahsanu

[quaker]

Hi all! First of all I'm happy to be a member of this forum, I've learned a lot reading your topics . I bump again this old thread because few days ago I faced a problem that I'm not able to resolve. 

The problem is only one: if the custumer modify Windows' time and put it back of 2 days he gets 2 more days of license. This because my program check the date/time of the PC.

To avoid this trick I was thinking to compare PC time with the time provided by an online website. If they are different the program will close itself, otherwise it can go for a license check. It should check both the date and the time. A better solution could be to modify directly Jefrey files but I'm not so skilled.

 

Thank you all 

[BrewManNH]

Check here:

It also pulls the current time, according to the timezone of the PC it's running on.

[quaker]

6 hours ago, BrewManNH said:

Check here:

It also pulls the current time, according to the timezone of the PC it's running on.

Thank you for the help BrewManNH. Thinking more about it I don't think is still a good idea. People use both 24h and 12h format and it's not good to force someone to change it. Need another solution 

[BrewManNH]

This doesn't change anything on the user's computer, it merely gets the current date and time from an NTP server.

[quaker]

On 19/9/2017 at 3:17 PM, BrewManNH said:

This doesn't change anything on the user's computer, it merely gets the current date and time from an NTP server.

I know I've read the script, but some people use 24h format, others use AM/PM format. I should write something to convert one to other but I need to find another solution.

[BrewManNH]

I believe this pulls the time in a 24H format, so you can always convert it and the user's time together, and if they don't match they've reset the time.

Do a straight comparison to the current date and time on the computer, if they don't match check to see if the time you pulled is past noon, and subtract 12 and compare again, if they still don't match then the computer time is set wrong.

[Buscarini]

Hello everyone, first of all i would like to thank you Jefrey for this code, i've updated and tested it and it's working fine. Since the thread is not locked i shall revive it once more.

The question: I made modifications to the original code to save the licence at "@scriptdir". Now, i need to stripe the code only the part that checks for the licence time validity, without validation of machine id. The reason for all this is because i want to execute my app over a LAN on a client, after installing the licence at the server, without asking to activate again, reading only the remaining days left from the licence (located at "@scriptdir"). And i cannot make it happen, how can i do that?