Search options (Page 1 of 2)

Instead of bashing around to get an information about Dimtry, it would be more effective to use the time for looking for an alternative. All of us who are working with scripts could give Pilotlogic or Lazarus IDE a try if Embarcadero is to expensive. For all the others, there are maybe other tools around.

Take the situation as it is.

Just my two cent on this.

MVD comes from Russia. More strict rules about encryption technology...

Total right.

SQLite:
A paid version with encyption is available. Link at the forum.

MySQL:
SSL connection possible. Link at the forum.

SHA-2 (First problem)
Password Hash can only done with MD5. SHA-2 is not supported by MVD and MD5 is marked as broken.

AES256 (Second problem)
MVD has RC5, but this is not correct working due to UTF storing.
Some content, which is not a seach object, with confidential information must be stored inside the Database with AES256.

.dcu file (Third problem)
The .dcu file is not encrypted and a password for Database encyption or connection encyption can be read out. We have had an audit where is was flagged as an issue. The .dcu need to be encypted. Not storing the required password and asking the user to enter it on program start would make it possible to read the database also outside MVD. Makes this option also to an issue.

Sounds like much work for Dmitry and a question: Can he sale international a software with SHA-2 and AES256 from Russia?

Looks like I need another development tool.

Microsoft has changed the API.

Example:

In other words:
Depending on your application target (Compiled part inside the software header), Windows 10 tells what is required for the software to work. Without access to the registry, you can not get the versioninformation for sure.
Dmitry can not compile as Windows 10 Target because it could loose backward compatibility with previous Windows Version.

Hi,

after nearly 2 years an update-question.

Has anything changed in your opinion about Postgres, etc.?

Oracle is tighten their license politics. A consultant from Orcale told our company, if we would use MySQL internal only, a license would be currently  not needed, but if we sell any software who uses MySQL we would need to purchase a developer license, exept we sell Open Source. Internal usage could be changed in the near future. Even for VirtualBox you need to purchase a license if you use it in a company.

Please let us know.

Replace the script with my version!

Delphi XE editions have a bug with String and ANSI/UTF8 Mode switching.

String has dual definition. ANSI and UTF8

Form Element Memo is designed UTF8. So Encryption and Decryption works without problem.

At the script you can see that it will work if you do encryption at the Memo Field and transfer encrypted content to String. String get the internal information to switch to UTF8 Mode.

Base64 not tested, but if you search for "UTF8 to Base64 Delphi Source Code" you get various information for a converting problem with Delphi XE editions with UTF8 and Base64. For correct converting you need a few lines more code to convert String to Widestring and telling the internal Base64 function to switch to UTF8 Mode instead of ANSI Mode.

Or you try to find a complete source code.

Use online converter for testing.

For converting String variables you need to bring String fixed to UTF8 Mode or you convert it direcly to Base64. This would result the following structure:

EncryptRC5(Content : String, Key : String) : Base64
DecryptRC5(Content : Base64, Key : String) : String   (or WideString)

You can see the switching problem on the text4 variable: The length is double as from the text1 variable.  UTF8 has two bytes, ANSI one byte. String is not correclty catching the mode switching. And this results also in the problem, that the Database does not get the right information what to store. ANSI or UTF.

Delphi 10 editions have a better switching selection for String.

Expensive - maybe Lazarus would be interesting and cheaper to look into....

Just what I see: You don't have a time lock.

Give a answer to the following question:
What happens if a user change the clock at the PC?

Date now = 01.01.2022   
And the customer has paid for 30 days.

How long would your software work, depending on the start date which is set to 01.01.2022 at the installation and entering the serial key?

see your code.....

    if (sKey='FJKS-TJKS-WEEW-NMVV') then days=now + 30 or
       (sKey='NNMF-QPOV-FDDK-ZUIF') then days=now +180 or
              (sKey='NNM1-QPOV-FDDK-ZUIF') then days=now + 360 or
       (sKey='VCJK-RGJJ-CWER-GHFJ') then days=now + forever or something

Good luck 

My 2cents on it:

Creating a perfect copy protection is a dream. Even Microsoft know this.
You can make it difficult for easy end users, but exactly at the moment where your application becomes interesting for some people they will break it and your developing time for the copy protection was wasted time because to much people will break whatever you have created.
You can purchase some third party tools for copy protection who are working as wrappers for the software, but it would be also only a matter of time until it has been broken.
If you need something heuristic safe I can suggest something which must be coded as script. I write it here more understandable and not as computer code:

PART 1 (Customer create it):
randomized value 1 + randomized value 2 + number from hdd (MVD can read it in Version 3.2) = Text String
hex value of Text string (sample here in forum) = your machine code

PART 2 (You create it):
Serial No and - if you want - customer name + Part 1 + Software Version and Product ID + something else additional which is also in the software but not visible = Text String
hex value of Text string (sample here in forum) = your Activation code

Part 3 (Customer check it):
Part 1 + Serial No and - if you want - customer name + Software Version and Product ID + something else additional which is also in the software but not visible = Text String
hex value of Text string (sample here in forum) must be identical to Activation code

Customer must give you Machine Code
You give customer serial No + Activation code
If it fits it is activated.
No need for Mainboard ID, etc. because every activation system works more or less like this sample.
Sometimes the Serial No is included in the Activation code as a prefix or suffix.
The only way to make it more save would be a full encryption with AES or something else. But here you could have issues with export regulations from your country where you live.
Have fun with coding.

The problem is, whereever MySQL is included and you deliver it together with your software you need a commercial licence. Oracle told me this morning that the commercial licence is a yearly subscription.

@radsoft
The Uniformserver contains MySQL. Oracle told me a commercial licence is also needed from their point of view.

Oracle sales told me the yearly costs for all kind of sales are 10,000 USD/Year.

To much for me.

@Dimitry
Could you think about to support Postgresql or Firebird? They does not charge anything and real open source.

Thank you
lostdb