PHP Activation System

[Carbine]

This isn't necercerally something that I need now, but I think it could be helpful for the future. Lets take vBulletin for example, how do they know if your activation key is right because it's to risky using a database as the software would give out the details easily. Any ideas?

[jacek]

Why is it risky to use a database That almost defiantly the way to do it

[Carbine]

Think about if you're selling some software, putting database details in the script to see if it's a right code would be very insecure, and also they could manipulate it go to their own database :L Also they could just delete the whole activation bit right?
/E would I need to use some sort of encoder so they can't see this part of the script?

[jacek]

Oh right, I thought you meant like email activation for accounts.

For something you were distributing, yes having the password in the file would not be a good idea, you would probably have it post data to a php file on your server that would then be able to control how much it can do.

Also they could just delete the whole activation bit right?

They could, but you have to just trust them, as there is no way to encode it really.

[Carbine]

What about this?
http://www.zend.com/en/products/guard/

[jacek]

Only works if they have a thing installed on their server, and it can be easily decoded http://www.showmycode.com/

[Carbine]

Fair enough, so posting through to a page on my server is the best way to go? And if so. I'd use hidden fields to post any other information such as IP if needed?

[jacek]

well you could just use php to send the post data, there is no need for an actual form.