Serial Data Base [Immediate Updating System]

[SKyTearz]

I would like To know how I can Immediatly update the serial database to my clients without re-sending my entire project output to them because this is time consuming when projects reach 10-200+mb and the regurlar 56k'ers would not like to keep downloaded this size of file just to get the serial user table or project user table updated and secure from potiential project serial crackers and abused serial users.

This is great when you need to Disable/Re-Enable certain users. Because the Patch can be just A serial update from TrueUpdate forcing the user to update his/her project with the new list of serials.

On new project launch if the serial entered does not match any of the Serial Updates have Setup Factory automatically remove all project files that were previously installed from older projects Disabaling the "Serial Cracker" from Continue using the Old project if installed most "Serial Crakers" will download and try the same serial for the newer project release and will be prompt with these circumstances.

I really hope there is A reader that will respond to this question and explain if possible step by step to this dilima. thankyou always


[SkyTearz]

[Steven Carr]

If you are able to write a small DLL then you can pass serial through to that to verify your serial. This way you can maintain the serial database however you want and it can be completely outside of the installer.

[Brett]

One good way to do this would be to host the serials database on your Web site (MySQL, etc.) and then have the updater validate serial numbers using the HTTP.Submit action to send the user's serial to the Web script (PHP, etc.) and then the Web site validates the serial and sends back a status code.

[SKyTearz]

Great reply's. Am Im able to get A few sample's though or complete walkthrough's would greatly appreciate if the timing is well on your half. Having A-d-d isnt really the best thing to have...hehe... So you have to supply me with some material I can work off of. But I always try my best to understand everthing that is told. Pictures are worth A thousand words to me and thousand words are like pictures to me if step by step =D

[Steven Carr]

For a DLL solution the first question is "do you have a compiler"?

[SKyTearz]

like an asm? or masm or somthing like that? no but know what one is.

[Steven Carr]

Something to write a DLL in which asm/masm is one but generally that is not a first choice for most people. C/C++/Delphi/Basic/etc..

But it sounds like there would be a fair learning curve. There would be a number of programming areas which need to be brought together effectively to make it happen without having a weak solution.

You might want to follow up on Brett's suggestion first.

[rctshine]

Do you have any examples of how to make a serial-submission code + web-form? I tried. No luck. :( If you can help, please do.


aahhhhh......

[rctshine]

Hello? Anyone?

[Eagle]

This may be just one of many ways to handle Serials etc.

1. learn how to use the 'crypto plugin' and zip plugins.
2. maintain an 'encrypted serial number list', then zip it with a 'password'
3. maintain an 'encrypted lua file' - with approved unzip-decrypt functions..approved crc values' anything else, included in above .zip if desired.
4. Upload it to the server.
5. Create a 'special SUF7 'module' who's task is to dload via your chosen
method from the server the above created zip. This module has code-functions which perform unzip and decryption of the 'latest lua file' etc
in your now downloaded 'uploaded zip'. Extract the lua file and 'load it'.
(This Lua drives the checking of serials other related actions etc.).
if loaded without error..delete it. The serial number list has been decoded
and read to a Table, then this 'list' is deleted from user's system.
Now everything is in 'memory' ..the processing so far is very fast,
so the chance of a savvy user intercepting the 'raw decrypted file-s'
before they are committed to 'memory' is very minimal.

Note: when the target program was originally installed, the serial number
at time of installation was 'encrypted' to the registry--the raw serial number is not recorded.
(your lua script above 'knows how to decode this back to
its raw state for comparison with approved list).

6. The loaded Lua has a function that cycles through the Table of 'serials'
created, performing 'approved or now disallowed' checking-
7. Based on this checking, actions within this Lua determine how
you wish to handle things from then on.

My theory is you can update and change- add approved encryption-decryption 'sygnatures' -methods at will.
You could even 'change' the encrypted serial on use's system if needed !.
As long as your fancy Lua file 'knows' all previously approved 'methods' of serial comparison etc.

Download overhead is minimal, up to you to upload and maintain your
encrypted 'control file-s' on the Server.

Once the proccess is done , your code removes all strings, tables from
memory by setting them all to 'nil' .

If it takes a week or longer to get things going and lots of testing etc.,
then so be it. So far it has cost you nothing but time and increased your
knowledge of action scripting etc. Looking forward, % of profits go to
engaging someone else to construct PHP or web scritping etc.

Hope the above made some form of sense.

Sorry to rave on --however I have this working for me as a method.
I lear'nt a lot by doing it

(I do not feel comfortable supplying any code on how I got things working
this way.. I need to 'protect' code, I hope people understand..)

[Eagle]

Tip when using the zip plugin..for added security..encrypt each file
before it is added to your zip. Encrypt the .zip itself ..Zip programs
cannot even show you the 'binary list' -what is inside the .zip.

This also disguises the fact that the .zip itself is 'passworded' as
the zip program reports the file as either 'corrupt' or just plain 'unreadable.'

you can call your .zip 'mytricky.bmp' if you want..Decrypt functions-actions
know what to look for etc..

[rctshine]

I was acually looking for more of a way to keep track of what serials have been used by storing them in a online database, and have the program send the serial to the database, check in one table to see if it is used, and if it is not, check the other table to see if it is a true serial. That would be much better than having to update in manually.


Has anyone done this?
And if they have, can they post/ PM me the code?

[rctshine]

Anyone? Someone?

[rctshine]

pleeeeeeeaaaaaaaaasssssseeeeeeeeeeee..............

[Adam]

Sorry Indigo Rose does not have any such sample code. I have used MYSQL and PHP before and it works nice. You may be able to find an online book or something on using these two technologies together. I had a great book but I can't seem to find it around.

I also suspect that people that have developed these types of systems do not want to give away their source code for security reasons.

Adam Kapilik