9. Dynamic Key Review

Dynamic Keys are a feature of the Encoder where the bytecode for selected PHP code can be encrypted with a custom key of your choosing. Rather than being stored, the decryption key is generated when required by the Loader calling a PHP user function. The function to call is given as part of the dynamic key specification in the PHP code. We recommend keeping a key generator function simple, and using only data that is external to the function and available at runtime. The Dynamic Key Review dialog is available to help you review your dynamic key functions and suggest improvements. Further information about Dynamic Keys and how to use them can be found in the User Guide PDF.

To use this feature, choose the Dynamic Key Review... item on the Tools menu. A dialog similar to the screenshot below will appear.

Paste the PHP code for one of your dynamic key functions into the upper text box, then click Review. After a few seconds the dialog will give a critique. The analysis identifies sources of data used by the function, and guides you to improve the function if necessary by making use exclusively of data that is available at runtime rather than hardcoded literal values.

After a successful analysis, output will be similar to the screenshot below. Any errors will be shown instead. This example also illustrates the use of names that do not suggest a relation to key generation.

This feature is available with the Pro and Cerberus editions, and is currently experimental.