简体   繁体   English

如何保护Web应用程序

[英]How to protect a Web Application

I've a web application( ASP.NET WebForms). 我有一个Web应用程序(ASP.NET WebForms)。 Now I need to give this application to my client for offline(Installed on Local Server and accessed via LAN) installation. 现在,我需要将此应用程序提供给我的客户端以进行脱机(安装在本地服务器上并通过LAN访问)安装。 I want to protect this application from being copied. 我想保护此应用程序免受复制。

All I can think of now is: 我现在能想到的是:

I should maintain a online server and have a Activation Page which runs when the Web App is run for the first time, It should connect to the server and get a valid license against a Key(entered by me in Web.Config during installation) and machine parameters. 我应该维护一个在线服务器,并拥有一个激活页面,该页面在首次运行Web App时运行,它应该连接到服务器并获得针对密钥的有效许可证(安装期间由我在Web.Config中输入),并且机器参数。

Also, if I code it I need to take care of System Clock and other naive issues. 另外,如果我编写了代码,则需要照顾系统时钟和其他幼稚的问题。

Now, I have two questions. 现在,我有两个问题。

  1. Are there any other options to safe guard a web app? 还有其他选择来保护Web应用程序吗?
  2. Does the solution I'm planning to code, already exists? 我打算编码的解决方案是否已经存在?

Thanks for reading and trying to help. 感谢您的阅读和帮助。 :) :)

No, no, no.. You can't tottaly protect your ASP.NET app like this.. 不,不,不。您不能像这样完全保护您的ASP.NET应用程序。

Customer(if want to) can decompile your code and replace your activation methods, so application will allways think that it's "legally activated", or for example he can write fake activation server that will always activate your software... It's not so hard really, especially when your application is based on .NET. 客户(如果愿意)可以反编译您的代码并替换您的激活方法,因此应用程序始终会认为它是“合法激活的”,或者例如,他可以编写伪造的激活服务器来始终激活您的软件……这并不难确实如此,尤其是当您的应用程序基于.NET时。

This "protections" main purpose is only to make illegal copies creation little longer to do(for servial weeks or month-two..), so your selling departament can sell many-many copies to legal customers, and losses from illegall usage can be not so huge at project start time.. Or can be huge anyway even with usage of "super-super-super commercial protection product for you apps".. It's depends on luck and populariry of your app.. 这种“保护”的主要目的只是使创建非法副本的时间更长一点(在服务周或两个月内..),因此您的销售部门可以将许多副本出售给合法客户,并且因非法使用而蒙受的损失可能是在项目开始时不会那么大。或者即使使用“为您的应用程序提供的超级-超级-超级商业保护产品”也可能会很大。这取决于应用程序的运气和受欢迎程度。

Only, and ONLY way protect your ASP.NET application with 100% guaranty from illegal copying is.. NOT TO give application to client for local install's at all. 唯一且唯一的方法是100%保证免受非法复制保护您的ASP.NET应用程序。.根本不将应用程序提供给客户端进行本地安装。 Use SSAS-model for selling your app. 使用SSAS模型销售您的应用。 Or if it's not posible make this for some critical parts of your application. 或者,如果不可行,请在应用程序的某些关键部分使用。

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM