Cfencode.exe Lucee equivlent?

My company uses CFML for our web applications. We are trying to migrate
off of the Coldfusion CFML Server to Lucee.

We are looking for a way to obscure our CFML code, for when we sell our
services to an outside entity, and that outside entity has to host the web
server in their own datacenter. No longer AWS EC2 web servers we own in
the cloud.

We have looked at packaging and deploying to a .war file. However, from
our research, it appears that this can be opened and expanded with just
about any zip utility that can open a .war file.

We then looked at using the precompiled .class files in place of the .cfm
and .cfc files but this doesn’t obscure it enough as our cfset strings
still appear in the .class file.

Is there another way to obscure the files in such a way? Adobe had a
cfencode.exe application that could encode the files as well as that you
could do right next to the cfcompile.bat that could encode the files. Is
there a Lucee equivalent, or some other way to obscure our CFML code using
a lucee CFML server?

Shaun

IMO you’d be better off hiring a lawyer to write a contract that enables
you to prosecute clients who steal your intellectual property. Trying to
make code unreadable has quickly diminishing returns and will never be
100%. What I usually do is make it just hard enough that they have to try
to hack around it, and make the legal ramifications clear.

Thanks!

~BradOn Wednesday, January 4, 2017 at 10:05:45 AM UTC-6, Shaun Branham wrote:

My company uses CFML for our web applications. We are trying to migrate
off of the Coldfusion CFML Server to Lucee.

We are looking for a way to obscure our CFML code, for when we sell our
services to an outside entity, and that outside entity has to host the web
server in their own datacenter. No longer AWS EC2 web servers we own in
the cloud.

We have looked at packaging and deploying to a .war file. However, from
our research, it appears that this can be opened and expanded with just
about any zip utility that can open a .war file.

We then looked at using the precompiled .class files in place of the .cfm
and .cfc files but this doesn’t obscure it enough as our cfset strings
still appear in the .class file.

Is there another way to obscure the files in such a way? Adobe had a
cfencode.exe application that could encode the files as well as that you
could do right next to the cfcompile.bat that could encode the files. Is
there a Lucee equivalent, or some other way to obscure our CFML code using
a lucee CFML server?

Shaun

Shaun,

Can you drop me an email at @Gert_Franz, as there are possibilities here, which we can provide as a service.
The option i will share with you will take care of the issues you have.

GertSent from somewhere on the road

Am 05.01.2017 um 16:29 schrieb Brad Wood <@Brad_Wood>:

IMO you’d be better off hiring a lawyer to write a contract that enables you to prosecute clients who steal your intellectual property. Trying to make code unreadable has quickly diminishing returns and will never be 100%. What I usually do is make it just hard enough that they have to try to hack around it, and make the legal ramifications clear.

Thanks!

~Brad

On Wednesday, January 4, 2017 at 10:05:45 AM UTC-6, Shaun Branham wrote:
My company uses CFML for our web applications. We are trying to migrate off of the Coldfusion CFML Server to Lucee.

We are looking for a way to obscure our CFML code, for when we sell our services to an outside entity, and that outside entity has to host the web server in their own datacenter. No longer AWS EC2 web servers we own in the cloud.

We have looked at packaging and deploying to a .war file. However, from our research, it appears that this can be opened and expanded with just about any zip utility that can open a .war file.

We then looked at using the precompiled .class files in place of the .cfm and .cfc files but this doesn’t obscure it enough as our cfset strings still appear in the .class file.

Is there another way to obscure the files in such a way? Adobe had a cfencode.exe application that could encode the files as well as that you could do right next to the cfcompile.bat that could encode the files. Is there a Lucee equivalent, or some other way to obscure our CFML code using a lucee CFML server?

Shaun


You received this message because you are subscribed to the Google Groups “Lucee” group.
To unsubscribe from this group and stop receiving emails from it, send an email to lucee+unsubscribe@googlegroups.com.
To post to this group, send email to lucee@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/lucee/6715fd3b-8412-4003-aaa4-16c7fc58b2f7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.