前段時間在flashseer看到有人提到:可以通過socket方式傳送swf文件,讓用戶無法獲取到swf文件… 當時還沒有出as3的反編譯,所以對程序的保護沒有在意.隨著反編譯程序的平民化,不希望別人看到源代碼的朋友就比較著急…
通過socket方式傳送swf文件來避免洩漏源代碼的思路(只適用as3): 讓主程序的loader(前台swf)通過socket連接到後台程序,然後請求需要的主程序文件.後台讀取主程序數據通過socket發送給主程序的 loader.前台swf適用Loader.loadBytes方法顯示主程序文件.
下面是測試的源程序:
package {
import flash.display.Sprite;
import flash.net.Socket;
import flash.events.*;
import flash.errors.IOError;
import flash.display.Loader;
public class SocketTest extends Sprite {
public function SocketTest() {
var socket = new Socket();
socket.connect("localhost", 5277);
socket.addEventListener(Event.CLOSE, closeHandler);
socket.addEventListener(Event.CONNECT, connectHandler);
socket.addEventListener(IOErrorEvent.IO_ERROR, ioErrorHandler);
socket.addEventListener(SecurityErrorEvent.SECURITY_ERROR, securityErrorHandler);
socket.addEventListener(ProgressEvent.SOCKET_DATA, socketDataHandler);
var response:String;
function writeln(str:String):void {
str+="";
try {
socket.writeUTFBytes(str);
} catch (e:IOError) {
trace(e);
}
}
function sendRequest():void {
trace("sendRequest");
response="";
writeln('bin');
socket.flush();
}
function readResponse():void {
//接受數據
var str:String=socket.readUTFBytes(socket.bytesAvailable);
response+=str;
//當數據以end結束的時候,數據傳輸結束
if (StringUtil.endsWith(str,'end')) {
response=response.substr(0,response.length-3);
//把字符串轉換為ByteArray
var ba=Base64.decodeToByteArray(response);
//trace('bytearray=====',ba);
var l:Loader = new Loader();
//從 ByteArray 對象中所存儲的二進制數據中加載。
l.loadBytes(ba);
//trace(l.content);
addChild(l);
}
}
function closeHandler(e:Event):void {
trace("Socket closed! ");
}
function connectHandler(e:Event):void {
trace("Socket connected!");
sendRequest();
}
function ioErrorHandler(e:IOErrorEvent):void {
trace("IOError!");
}
function securityErrorHandler(e:SecurityErrorEvent):void {
trace("SecurityError!");
}
function socketDataHandler(e:ProgressEvent):void {
trace("Socket have data!");
readResponse();
}
}
}
}
PHP:
//後台scoket程序,由於適用php寫比較簡單,就用php寫了.
//error_reporting(E_ALL);
error_reporting(0);
set_time_limit(0);
ob_implicit_flush();
$address = 'localhost';
$port = 5277;
if (($sock = socket_create(AF_INET, SOCK_STREAM, SOL_TCP)) < 0) {
echo 'socket_create() failed: reason: ' . socket_strerror($sock) . '\n';
}
if (($ret = socket_bind($sock, $address, $port)) < 0) {
echo 'socket_bind() failed: reason: ' . socket_strerror($ret) . '\n';
}
if (($ret = socket_listen($sock, 5)) < 0) {
echo 'socket_listen() failed: reason: ' . socket_strerror($ret) . '\n';
}
echo 'connect…………….';
do {
if (($msgsock = socket_accept($sock)) < 0) {
echo 'socket_accept() failed: reason: ' . socket_strerror($msgsock) . '\n';
break;
}
do {
socket_recv($msgsock, $buf, 2048, 0);
if ($buf == "") {
socket_close($msgsock);
echo "some one quit";
break;
} else if ($buf == "bin") {
//讀取主程序數據
$f = fopen('main.swf','r');
$data = fread($f,filesize('main.swf'));
fclose($f);
//轉換為字符串
//echo base64_encode($data);
$talkback = base64_encode($data).'end';
}
//發送
socket_send($msgsock, $talkback, strlen($talkback),0);
} while (true);
socket_close($msgsock);
} while (true);
socket_close($sock);