Making an authentication server ?

[ForsakenGod]

Well hello ,

I ve finished creating my product ( and app in autoit ) and i want to share it with several people throught internet . To dont make it so easy to steal it i actually want to make some kind of authntication before the user is able to use the app . Actually what i think should the sequence be is :

1 . Get the key from inputbox and via php/or auth server check its validity if it is or its not in DB

2 . Return valid/invalid

3 . Every 15 seconds refresh if the connection is still active (to prevent from multi using one key)

4 . If the connection to server has failed stop the app (or close it)

5 . If the key is used 2 times from 2 diff IPs somehow bann the IP ( Absolutely no idea how could be this done )

6 . The data between auth server and the app should be somehow protected to dont allow it to be cracked that easily (Still new to this)

If i forgot somethink please post it here . I am also looking for your suggestions or sample codes really everythink is appreciated !

Thanks again ,

Unreal

[Juvigy]

Dont bother. If anyone wants to steal it he will de-compile the executable and remove the "key" code.

AutoIt is open source oriented.What does your program do?

[water]

Here's a good example that might have some of the required features.

[ForsakenGod]

Water thanks will definelly look at it ! And the prog is used for our "team" to share the work they ve done on the project . You know so we wont do smthink that s1 already did (in out team ) also it allows to make a note for the future visitors etc

[Xand3r]

the only real safe programs are the ones that run on your server and the client only has an interface to show the work done on the server (like WoW for example )

[ForsakenGod]

the only real safe programs are the ones that run on your server and the client only has an interface to show the work done on the server (like WoW for example )

Actually you may be right however WoW isnt safe at all . Too easy to write an bot nowdays and also there are several hacks that bend the rules there . I am however not creating a game or anythink common with it . Anyway i am just looking for a bit safe auth system Any suggestions ?

[icu]

@ForsakenGod did you get any further with this? I need something similar.

[water]

I don't think you'll get an answer. ForsakenGod hasn't been online for nearly 2 years.

[Juvigy]

Yea, didnt you get that he is 'forsaken' ?

[icu]

Well nothing like a Hail Mary post... you never know if someone will reply.