How do I create a license key for plugins?

[GoogleMyKyries]

Hey MC-Market, I am wondering how you can make a license/HWID key for plugins. I’m asking this if I might make a plugin in the future! If there a numerous ways, please reply below.

Thanks!

 

[longdog]

Create a web host, set up some array/list of whitelisted whatever (hwid) and make a php page where you use GET to get a request from your plugin (http://yourhost/whitelist?hwid=personshwid) and of hwid = whitelisted hwid then allow it

 

[Jack]

Create a web host, set up some array/list of whitelisted whatever (hwid) and make a php page where you use GET to get a request from your plugin (http://yourhost/whitelist?hwid=personshwid) and of hwid = whitelisted hwid then allow it

Need more security than that (not sure if the licensing systems that were mentioned are more than that though).
Otherwise, I just redirect http://yourhost/whitelist?hwid=personshwid to http://myhost/whitelist?hwid=personshwid

 

[longdog]

Need more security than that (not sure if the licensing systems that were mentioned are more than that though).
Otherwise, I just redirect http://yourhost/whitelist?hwid=personshwid to http://myhost/whitelist?hwid=personshwid

Yeah that’s VERY simple, you would want mysql with md5 hashing preferably with sql injection protection, bot protection and maybe ssl. I also forgot to include that if the persons hwid is in the array, return something that will be read by your plugin.

 

[Jack]

Yeah that’s VERY simple, you would want mysql with md5 hashing preferably with sql injection protection, bot protection and maybe ssl. I also forgot to include that if the persons hwid is in the array, return something that will be read by your plugin.

For simplicity, I would recommend taking your first example and just adding ECDSA.
The plugin will also need to be obfuscated/included in the handshake, so people can't just remove the license validation to use the plugin.

 

[longdog]

For simplicity, I would recommend taking your first example and just adding ECDSA.
The plugin will also need to be obfuscated/included in the handshake, so people can't just remove the license validation to use the plugin.

Yeah that’s for the plugin side, make sure you use your own encryption that no one can just deobfuscate