Plugin Verification

Discussion in 'Plugin Development' started by Kharte321, Nov 17, 2016.

Thread Status:
Not open for further replies.
  1. Offline

    Kharte321

    Hi I was wondering if there's away my plugin can communicate with a web server to see if a licence key is valid
     
  2. Offline

    Kharte321

  3. Offline

    krizzdawg

    Yes its possible, you can setup a new a Java UUID for each copy. Check if it matches with whatever database you are connecting too. Then check if it the UUID is valid.
     
  4. Offline

    Zombie_Striker

    @Kharte321
    Although you can use @krizzdawg 's idea, there may be a better option. We need to know exactly what you need to verify and why you need your plugin to be verified.
     
  5. Offline

    krizzdawg

    Zombie_Striker, How are you not a moderator yet? You are soo active on these forums. Also very helpful.
     
  6. Offline

    mythbusterma

    @Kharte321

    If you are trying to make your plugin require a license to activate, then yes, that is possible. It is also possible to circumvent in an hour (for myself) or a lazy afternoon (for a determined noob).

    Your protection is going to be pointless, is what I'm getting at.
     
    timtower likes this.
  7. Offline

    Kharte321

    Can anybody give example code?
     
  8. Offline

    timtower Administrator Administrator Moderator

    @Kharte321 There is no example code because it takes an hour max to remove this check. I can even fake it even faster.
    There is no use in doing this.
     
  9. Offline

    I Al Istannen

    @timtower
    There is an Anti-Hack plugin which requires the user to install a client program to be able to play. Yes, really.
    This checks your versions folder or something and sends some random "encrypted" packet to the server.
    To make decompiling harder it was written in C++.

    Guess what appeared a few days later in very same thread from a user? A small commandline program sending the correct packet in response to the server's authenticate request.

    And this was made by decompiling and understanding the assembler code behind, which is a lot harder than just decompiling Java.

    @Kharte321
    Yes, I would just not implement such a check. There are ways to circumvent it and it is especially easy in Java.
     
Thread Status:
Not open for further replies.

Share This Page