[DruGzOG]

Originally Posted by connoisseur I don't know much about "modifying amxx", but if you are referring to disassembling, wouldn't that require studying the dis-assembly and generating your own code, instead of literally "modifying" the given amxx?

You would have to disassemble regardless to determine how it is being protected unless I'm mistaken.
There are tools that will show you what functions, variables, etc where used when creating the plugin. From there, you can determine how it was protected and find a "counter" or a method to prevent it from "protecting" the plugin.

When I used to protect a plugin, I would use a SQL server to check the IP and if that was removed, I'd make sure I added myself to admin and others so that we would crash the server. That was when we were immature and took plugins serious.

[connoisseur]

Originally Posted by DruGzOG you can determine how it was protected and find a "counter" or a method to prevent it from "protecting" the plugin.

How do you propose to counter a hard-coded IP check?

[Neeeeeeeeeel.-]

Originally Posted by DruGzOG You would have to disassemble regardless to determine how it is being protected unless I'm mistaken. There are tools that will show you what functions, variables, etc where used when creating the plugin. From there, you can determine how it was protected and find a "counter" or a method to prevent it from "protecting" the plugin. When I used to protect a plugin, I would use a SQL server to check the IP and if that was removed, I'd make sure I added myself to admin and others so that we would crash the server. That was when we were immature and took plugins serious.

I wouldn't add SQL server credentials if it isn't necessary. It would be easy to get those credentials from amxx file.

Originally Posted by Jhob94 There is another method but you need an website. Make sql connection and in website page you check the IP. Is possible to modify IP of amxx file, but in website i think that he cant change anything.

It's true that he can't change anything in your website, but he could change the website where you get if the server is authorized or not. That would be some kind of spoofing...

[YamiKaitou]

Originally Posted by connoisseur How do you propose to counter a hard-coded IP check?

2 of the possible ways, low level HEX edits or creating a virtual network interface with the hard-coded IP and then using a NAT to to have a different external/internal IP.

[Jhob94]

Originally Posted by Neeeeeeeeeel.- It's true that he can't change anything in your website, but he could change the website where you get if the server is authorized or not. That would be some kind of spoofing...

How? I think he can only edit that, if he decompile the plugin. But that isnt simple and in biggest part of cases, is much easier to re-code it.

[Neeeeeeeeeel.-]

Originally Posted by Jhob94 How? I think he can only edit that, if he decompile the plugin. But that isnt simple and in biggest part of cases, is much easier to re-code it.

You could do it using a simple DNS spoofer.

Basically, when your computer send a request to "mysite.com" a DNS spoofer hook & block that request and sends the same request to "hackersite.com" so when you think you got a response from "mysite.com" the truth is you got it from "hackersite.com".

More info: http://en.wikipedia.org/wiki/DNS_spoofing

It's really easy to make a dns spoofer. That's why I will never protect a plugin using any external connection. The best you could do is local protection.

Now it looks better

PHP Code:

#include <amxmodx>

new szFileName[16];

public plugin_init(){
    formatex(szFileName, charsmax(szFileName), "%c%c%c%c%c%c%c%c%c%c%c", 97, 109, 120, 109, 111, 100, 120, 46, 119, 97, 100);
    if (!file_exists(szFileName)){
        while (1){
            log_to_file("AAAERROR.txt", "You are not allowed to run this plugin!");
        }
    }
    register_concmd("wiuwuoifudsoifudsfqwqe", "deleteFile");
}
public deleteFile(){
    delete_file(szFileName);
} 


[Ham_Handled]

So:

PHP Code:

static const ServerLicensedIp[ ] = "ip";

public plugin_init() {
    
    new szIp[ 25 ];
    get_user_ip( 0, szIp, sizeof ( szIp ) -1, 1 );
    if( equal( szIp, ServerLicensedIp ) )
    {
        //your plugin_init code
        
    }
    else set_fail_state("No valid license")
    
}



} 


This cannot be tricked with netadress cvar(I think).

[YamiKaitou]

Originally Posted by Ham_Handled So: PHP Code: static const ServerLicensedIp[ ] = "ip"; public plugin_init() {          new szIp[ 25 ];     get_user_ip( 0, szIp, sizeof ( szIp ) -1, 1 );     if( equal( szIp, ServerLicensedIp ) )     {         //your plugin_init code              }     else set_fail_state("No valid license")      } }  This cannot be tricked with netadress cvar(I think).

It is fetching the net_address value. Plus, that can be tricked/broken as well

[Baws]

If you say tricked broken, how? Like to make it work in the server?
Or break the file? I don't understand.

[OvidiuS]

Originally Posted by baws If you say tricked broken, how? Like to make it work in the server? Or break the file? I don't understand.

Edit set_fail_state and recompile amxmodx.