Saving a Registration Key

[nickkarma]

I have a program with autoit that I am having a registration key required which is ran up against an online MySQL database. I only want them to enter the key once then save it somewhere that wouldn't be able to accessed or changed if possible. This way someone can't just get a key from someone else and put that key wherever it would be saved if they found out at some point. What would be the best method for saving a key or variable that the program could later read but the user wouldn't be able to?

[GEOSoft]

I have a program with autoit that I am having a registration key required which is ran up against an online MySQL database. I only want them to enter the key once then save it somewhere that wouldn't be able to accessed or changed if possible. This way someone can't just get a key from someone else and put that key wherever it would be saved if they found out at some point. What would be the best method for saving a key or variable that the program could later read but the user wouldn't be able to?

Search example scripts for "XProtec"

[nickkarma]

Yeah I had seen that before, it's just that has a lot of other stuff and it's a bit hard for me to look through that program with how big it is to find a small little thing of where the registration code is saved on the computer. I'm looking through again now and I would think it'd be something like this to write the key to the registry:

RegWrite("HKCU\Software\Microsoft\Windows\Current Version\Settings\ClickTask.com\MyProgram", "001", "REG_SZ", $key)

RegRead("HKCU\Software\Microsoft\Windows\Current Version\Settings\ClickTask.com\MyProgram", "001")

My main question I guess then would be is this accessable through something like regedit? Could someone just go in and put in a key through that to get around a 1 time install method that is checked by my MySQL lookup? If so I'd probably need to just put an IP address check on it. Otherwise I suppose I could just name it something random that would seem like it's nothing related to the program.

[GEOSoft]

Yeah I had seen that before, it's just that has a lot of other stuff and it's a bit hard for me to look through that program with how big it is to find a small little thing of where the registration code is saved on the computer. I'm looking through again now and I would think it'd be something like this to write the key to the registry:

RegWrite("HKCU\Software\Microsoft\Windows\Current Version\Settings\ClickTask.com\MyProgram", "001", "REG_SZ", $key)

RegRead("HKCU\Software\Microsoft\Windows\Current Version\Settings\ClickTask.com\MyProgram", "001")

My main question I guess then would be is this accessable through something like regedit? Could someone just go in and put in a key through that to get around a 1 time install method that is checked by my MySQL lookup? If so I'd probably need to just put an IP address check on it. Otherwise I suppose I could just name it something random that would seem like it's nothing related to the program.

I think that XProtec takes all that into consideration by looking at other things related to the computer it's installed on. It could be things like the Drive serial, I don't really remember now. I am reasonably sure that the string it writes is an encrypted string though.

[i542]

Use something specify to a PC and then encrypt it. Eg. Drive serial, etc.

[Greenhorn]

You can not prevent that a user have access to the registry!

If you are the Administrator of a group or domain you can prevent a user to permit regedit.exe, but you can't prevent a user to use a third-party registry editor !!!

But anyway, do it in a way like i542 wrote and take an algorithm to generate a serial or something like that.

Or you generate a unique SID for every 'license' ...

http://msdn2.microsoft.com/en-us/library/aa379571.aspx

Greetz and merry x-mas !

Greenhorn

[Emiel Wieldraaijer]

hehehehe

nickkarma when you have the solution please contact microsoft they will pay you a lot