setupPROTECT SDK (sPSDK) for SetupBuilder Available

[NewsArchive]

Hello all,

Today we released the setupPROTECT SDK (sPSDK) for SetupBuilder 6 Developer
Edition. It's free of charge for registered SetupBuilder Developer Edition
users with a current subscription. The sPSDK product is not available to
users of a SetupBuilder education and charity license!

Our server is busy sending out sPSDK notifications. If you already requested
the product and you have not received your notification within the next 18
hours, please let us know.

The setupPROTECT SDK (sPSDK) is a small, fast, and efficient software
development kit specially designed for serial number and subscription key
generation. The sPSDK is the "compiler" for your serial numbers or
subscription keys that your development team will use to quickly and easily
create the licenses you require. Designing a good software protection scheme
will extend your software protection lifecycle, allowing you the software
vendor to benefit more from increased software sales.

The sPSDK lets you dynamically generate serial numbers and subscription keys
on-the-fly.

* Serial-Number-Key Protection

SetupBuilder's built-in Serial-Number-Key Protection feature allows
developers to add serial number functionality to the installer. Developers
can choose to generate any number of serial numbers for any number of
products. Serial numbers can represent unique products, or sets of products.
The result of this function allows developers to create rules that can
manage all aspects of the installation based on rights granted by the serial
number the end-user has entered. Then at runtime, your user will be required
to enter a valid serial number in order to continue with the installation.

Many developers integrate security both in their software product, as well
as their installation in order to minimize its use by unauthorized
individuals.

* Subscription-Key Protection

With the powerful Subscription-Key Protection feature you can quickly
generate "Subscription Keys" to protect your installations and updates. This
technology is well suited for software subscription services in which the
end-users subscribe, for instance on a monthly, quarterly, semi-annually,
etc. basis.

At the end of the subscription period, end-users will have the option of
extending the subscription or simply continuing their current version. But
end-users will no longer be able to utilize product updates released after
the subscription expiration date/version. With setupPROTECT, the
subscription renewal is easy and simple. You only have to send a new
"Subscription Key" to your end-user.

This sPSDK tool is not part of the standard SetupBuilder installation and
has to be requested separately. Send your request to:

sales (at) lindersoft (dot) com

We have included Clarion, Visual Studio C++ 2002, 2005 and 2008 source code
example files. Updated .chm and .pdf documentation files are available.

Regards,

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

Hello Friedrich,

Not yet tested but seems so easy to implement for your demos .... in my apps
:)

MERCI

JP

--

Merci - Thank you

JP

Data Management Center
A tool to help you Transfer - Import - Export your data so easily ....

http://www.dm8.fr

[NewsArchive]

Hello Jean-Pierre,

> Not yet tested but seems so easy to implement for your demos .... in my
> apps :)
>
> MERCI

You are very welcome :)

It should take only a few minutes to implement it. Three APIs do all the
dirty work for you.

If there is any problem, just drop me a line.

Friedrich

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

Hi Friedrich,

>The sPSDK lets you dynamically generate serial numbers and subscription keys
>on-the-fly.

Downloaded, installed, docs updated, printing out the docs on this:)

Best regards,

Arnór Baldvinsson
Icetips Creative, Inc.
San Antonio, Texas, USA
www.icetips.com


Subscribe to information from Icetips.com:
http://www.icetips.com/subscribe.php

[NewsArchive]

Hi Arnór,

>>The sPSDK lets you dynamically generate serial numbers and subscription
>>keys
>>on-the-fly.
>
> Downloaded, installed, docs updated, printing out the docs on this:)

Great :) If there is any problem or question, please let me know.

Friedrich

[NewsArchive]

Hi Friedrich,

>Great :) If there is any problem or question, please let me know.

Does the Subscription Key verification require me to create a custom
wupdate.exe?

Best regards,

Arnór Baldvinsson
Icetips Creative, Inc.
San Antonio, Texas, USA
www.icetips.com


Subscribe to information from Icetips.com:
http://www.icetips.com/subscribe.php

[NewsArchive]

Hi Arnór,

> Does the Subscription Key verification require me to create a custom
> wupdate.exe?

You do the Subscription Key verification from within the web update
installer package, not from the wupdate.exe client!

In other words, you don't need to create a custom wupdate.exe :)

Friedrich

[NewsArchive]

Hi Friedrich,

>You do the Subscription Key verification from within the web update
>installer package, not from the wupdate.exe client!
>
>In other words, you don't need to create a custom wupdate.exe :)

Ah! Ok. Question: Does that mean that when an expired subscription
checks, that it will report there is an update, then download the
install stub and it tells that the subscription is expired? Could you
explain the process a little bit as it will appear to my customers? I
don't see any info on this in the docs (I may be missing it, I've only
glanced over it)

Best regards,

Arnór Baldvinsson
Icetips Creative, Inc.
San Antonio, Texas, USA
www.icetips.com


Subscribe to information from Icetips.com:
http://www.icetips.com/subscribe.php

[NewsArchive]

Sorry to seem stupid and blind Arnor but where are the docs you are talking
about ?
I only have the sdk dir in setupbuilder with demo1 and demo2 in
clarion...did not even open the other dirs ....

Merci

JP

--

Merci - Thank you

JP

Data Management Center
A tool to help you Transfer - Import - Export your data so easily ....

http://www.dm8.fr

[NewsArchive]

Hi Jean-Pierre,

>Sorry to seem stupid and blind Arnor but where are the docs you are talking
>about ?

Update your docs and then locate the "Implementing Security" topic
(it's a root node on the "Contents" tab)

Best regards,

Arnór Baldvinsson
Icetips Creative, Inc.
San Antonio, Texas, USA
www.icetips.com


Subscribe to information from Icetips.com:
http://www.icetips.com/subscribe.php

[NewsArchive]

Hi Arnór,

>>You do the Subscription Key verification from within the web update
>>installer package, not from the wupdate.exe client!
>>
>>In other words, you don't need to create a custom wupdate.exe :)
>
> Ah! Ok. Question: Does that mean that when an expired subscription
> checks, that it will report there is an update, then download the
> install stub and it tells that the subscription is expired? Could you
> explain the process a little bit as it will appear to my customers? I
> don't see any info on this in the docs (I may be missing it, I've only
> glanced over it)

Yes, that's correct. You add the subscription verification to your "web
update installer package", not the wupdate.exe client. The wupdate.exe
client only reports that a new version is available. It downloads the small
install stub and executes it. Here is where your serial number and
subscription verification process comes into play. If the serial
number/subscription is valid and current, you let the installer update the
target system. If the subscription is expired, you do not apply the update.
Instead, you can display a renewal message, open an order page on your web
site to offer a subscription renewal, and so on. The new sPSDK even allows
you to let your Windows web server generate the new subscription key
on-the-fly.

What we do in our SetupBuilder is, we handle subscription verification in
both the full install and the web update installer package. Our customers
can use the full install image or the web update (live-update) functionality
to bring their systems to the latest version.

The full (new) SetupBuilder installation process asks for a serial number
and a subscription key. It writes the keys to the registry. If the full
SetupBuilder install image is rerun (to update or repair an installation),
it reads the serial number and subscription key from the registry and
prefills the appropriate fields. No need to enter the information again.
Of course, the web update does the same - but in this case, serial number
and subscription key verification is done silently.

Okay, let us assume your customer "Joe User" has a subscription that expired
on 31-DEC-2007. You made a new version of your product available on
02-JAN-2008. Joe User downloads the new install, enters his subscription
key and, because it expired, the installer does not allow to continue. But
Joe is a smart developer. He manipulates his system clock and sets the date
back to 31-DEC-2007. Then he starts the installer again, enters the
subscription key and........ NOTHING. The installer still does not accept
it and he begins to ask himself "Why on earth is Arnór smarter than me?"

Of course, the same would happen if a "web update installer package" is used
during a web update process. A manipulation of the system clock does not
extend a subscription period.

One of the next SetupBuilder builds will make it possible to "lock" serial
numbers. Let us assume, "Joe User" ordered your product including a 1-year
subscription. But he used a credit card he "found on the street". You will
then be able to "lock" his serial number.

Does this help?

Friedrich

Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

"why is Friedrich smarter then me?" you should have written <BG>
Bravo and again thanks for all those nice goodies offered - I say it loud
again FOR FREE moreover

Merci

--

Merci - Thank you

JP

Data Management Center
A tool to help you Transfer - Import - Export your data so easily ....

http://www.dm8.fr

[NewsArchive]

Hi Friedrich,

>target system. If the subscription is expired, you do not apply the update.
>Instead, you can display a renewal message, open an order page on your web
>site to offer a subscription renewal, and so on. The new sPSDK even allows
>you to let your Windows web server generate the new subscription key
>on-the-fly.

What about Linux flavours? We use FreeBSD and I have no intention of
going to a windows server any time soon<g> I can automate it by
having a php script on my server act on an order and send an email to
an account that is only used for this and then my always-on server in
the office can pick it up and email the subscription key.

>One of the next SetupBuilder builds will make it possible to "lock" serial
>numbers. Let us assume, "Joe User" ordered your product including a 1-year
>subscription. But he used a credit card he "found on the street". You will
>then be able to "lock" his serial number.

And that would effectively lock him out from installing the software
as well as prevent him from downloading updates, correct?

Best regards,

Arnór Baldvinsson
Icetips Creative, Inc.
San Antonio, Texas, USA
www.icetips.com


Subscribe to information from Icetips.com:
http://www.icetips.com/subscribe.php

[NewsArchive]

Hi Arnór,

> What about Linux flavours? We use FreeBSD and I have no intention of
> going to a windows server any time soon<g> I can automate it by
> having a php script on my server act on an order and send an email to
> an account that is only used for this and then my always-on server in
> the office can pick it up and email the subscription key.

I know that PHP is more like coding in C (and the sPSDK itself is written in
ANSI C), but I am not sure if it is possible to convert the sPSDK source
code to PHP. I have never done this before.

>>One of the next SetupBuilder builds will make it possible to "lock" serial
>>numbers. Let us assume, "Joe User" ordered your product including a
>>1-year subscription. But he used a credit card he "found on the street".
>>You will then be able to "lock" his serial number.
>
> And that would effectively lock him out from installing the software
> as well as prevent him from downloading updates, correct?

That's correct. He can still install the previous versions, but does not
have access to the new stuff.

Friedrich

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

Hi Friedrich,

>I know that PHP is more like coding in C (and the sPSDK itself is written in
>ANSI C), but I am not sure if it is possible to convert the sPSDK source
>code to PHP. I have never done this before.

Ansi C should compile on a FreeBSD. Silicon Realms did this with
Armadillo. They gave you C code that you could compile on the server
and then access via cgi. It would definitely be an advantage for web
use since then I could just call the c compile from my php code to get
the serial number and/or subscription key and email it directly:)
Automation always gets my vote;)

If you would like me to test something, just drop me an email and I'll
see what I can do:)

>That's correct. He can still install the previous versions, but does not
>have access to the new stuff.

Ok, let me throw something else at you;)

Let's say that Joe is not the most honest person in the world<g> He
shares his install and subscription key. Is there anything in SB that
prevents multiple downloads of the same build by the same subscription
key?

Another thing: When a download is made, can I, from the SB script
either in the install stub or the wupdate, require connection to a
script on my server? I.e.

http://www.icetips.com/registerdownload?Version=%Version%&User=%UserName%

and perhaps require a response before the download is done?

I haven't looked at the docs to see if there are some functions in
this regard, so apologies if this is already well documented;-)

Best regards,

Arnór Baldvinsson
Icetips Creative, Inc.
San Antonio, Texas, USA
www.icetips.com


Subscribe to information from Icetips.com:
http://www.icetips.com/subscribe.php

[NewsArchive]

Hi Arnór,

>>I know that PHP is more like coding in C (and the sPSDK itself is written
>>in ANSI C), but I am not sure if it is possible to convert the sPSDK
>>source code to PHP. I have never done this before.
>
> Ansi C should compile on a FreeBSD. Silicon Realms did this with
> Armadillo. They gave you C code that you could compile on the server
> and then access via cgi. It would definitely be an advantage for web
> use since then I could just call the c compile from my php code to get
> the serial number and/or subscription key and email it directly:-)
> Automation always gets my vote;-)

;-) I'll see what options are available in this case. There are some very
"tricky" protection mechanisms in the sPSDK and my fear is that the
resulting PHP code is not secure enough.

"Tricky" means the following here. Let us assume, you and Charles are using
the built-in SetupBuilder serial number and subscription key features.
Charles tells you the "Unique Serial Number Generation ID" he is using in
his one million dollar revenue product to generate the serial number list.
Even if you have this information (the key to generate the serial number
list), it is not possible for you to generate a list of valid serial numbers
for his product.

> If you would like me to test something, just drop me an email and I'll
> see what I can do:)

Okay, thanks :)

>>That's correct. He can still install the previous versions, but does not
>>have access to the new stuff.
>
> Ok, let me throw something else at you;)
>
> Let's say that Joe is not the most honest person in the world<g> He
> shares his install and subscription key. Is there anything in SB that
> prevents multiple downloads of the same build by the same subscription
> key?

No. In this case you need the upcoming "lock serial number" feature. I am
using it for over a year now and it works rock solid. "Warez" guy uses a
stolen credit card and orders SetupBuilder. Server automatically sends a
serial number and a temporary subscription key (only works with this build).
Credit card company informs us a few days later (after we sent the permanent
one-year subscription to the warez group, thank you) that this was a
fraudulet transaction. No problem. We "lock" that serial number in
SetupBuilder and the next update does not work.

> Another thing: When a download is made, can I, from the SB script
> either in the install stub or the wupdate, require connection to a
> script on my server? I.e.
>
> http://www.icetips.com/registerdownload?Version=%Version%&User=%UserName%

Yes. You can use the "Run Program" feature in combination with the "Open
Web Page Option".

>
> and perhaps require a response before the download is done?
>

I don't see any way to do this.

> I haven't looked at the docs to see if there are some functions in
> this regard, so apologies if this is already well documented;)

Always ask if there is a question ;-)

Friedrich

[NewsArchive]

Hi Friedrich,

>"Tricky" means the following here. Let us assume, you and Charles are using
>the built-in SetupBuilder serial number and subscription key features.
>Charles tells you the "Unique Serial Number Generation ID" he is using in
>his one million dollar revenue product to generate the serial number list.
>Even if you have this information (the key to generate the serial number
>list), it is not possible for you to generate a list of valid serial numbers
>for his product.

I understand the concerns. It is tricky, no matter how you look at
it. If you walk to the other side of the table, the non-automatic
generation of serial number of subscription codes can mean delays for
our customers.

>No. In this case you need the upcoming "lock serial number" feature. I am
>using it for over a year now and it works rock solid. "Warez" guy uses a

Cool! I will definitely make use of that feature:)

>Yes. You can use the "Run Program" feature in combination with the "Open
>Web Page Option".
>>
>> and perhaps require a response before the download is done?
>
>I don't see any way to do this.

Well, I don't want to open a web page per se, just send a http request
to the server and then wait for response, perhaps either a 0 or 1
depending on whatever condition is being negotiated. I guess that
could be done with an external dll using things like NetTalk. Or
perhaps make a http request in SB and then use the status quote
returned.

http://msdn.microsoft.com/archive/default.asp?url=/archive/en-us/dnarwebtool/html/msdn_vbhttp.asp

has some information that looks like what I'm talking about.

I'll ask my C guy about this tonight. I think it would be really,
really cool in this regard to be able to send requests to a webserver
and get information back inside a waiting situation in SB.

Best regards,

Arnór Baldvinsson
Icetips Creative, Inc.
San Antonio, Texas, USA
www.icetips.com


Subscribe to information from Icetips.com:
http://www.icetips.com/subscribe.php

[NewsArchive]

Hi Arnór,

> I understand the concerns. It is tricky, no matter how you look at
> it. If you walk to the other side of the table, the non-automatic
> generation of serial number of subscription codes can mean delays for
> our customers.

Yes, I agree. But the security aspect has been one of the most important
things in the setupPROTECT and sPSDK planning stages. I have to check if
the security features can be ported to PHP.

>>Yes. You can use the "Run Program" feature in combination with the "Open
>>Web Page Option".
>>>
>>> and perhaps require a response before the download is done?
>>
>>I don't see any way to do this.
>
> Well, I don't want to open a web page per se, just send a http request
> to the server and then wait for response, perhaps either a 0 or 1
> depending on whatever condition is being negotiated. I guess that
> could be done with an external dll using things like NetTalk. Or
> perhaps make a http request in SB and then use the status quote
> returned.
>
> http://msdn.microsoft.com/archive/default.asp?url=/archive/en-us/dnarwebtool/html/msdn_vbhttp.asp
>
> has some information that looks like what I'm talking about.
>
> I'll ask my C guy about this tonight. I think it would be really,
> really cool in this regard to be able to send requests to a webserver
> and get information back inside a waiting situation in SB.

Okay, I see. The "Post to HTTP Server" function can already be used to send
data to a server. You as a client send a POST request, the server sends a
response, then closes the connection. This function gives you access to the
return value (succeeded or failed). The server response per-se is not
handled at the moment. But it's an interesting idea. I'll see what I can
do.

Thanks,
Friedrich

[NewsArchive]

Hi Friedrich,

>I'll ask my C guy about this tonight. I think it would be really,
>really cool in this regard to be able to send requests to a webserver
>and get information back inside a waiting situation in SB.

Some further research and links to msdn:

http://msdn2.microsoft.com/en-us/library/aa384233(VS.85).aspx
http://msdn2.microsoft.com/en-us/library/aa384238(VS.85).aspx
http://msdn2.microsoft.com/en-us/library/aa384247(VS.85).aspx
http://msdn2.microsoft.com/en-us/library/aa384322(VS.85).aspx

Best regards.

Arnór Baldvinsson
Icetips Creative, Inc.
San Antonio, Texas, USA
www.icetips.com


Subscribe to information from Icetips.com:
http://www.icetips.com/subscribe.php

[NewsArchive]

> Some further research and links to msdn:

Thank you, Arnór!!

Friedrich

[NewsArchive]

Hi Friedrich,

>Yes, I agree. But the security aspect has been one of the most important
>things in the setupPROTECT and sPSDK planning stages. I have to check if
>the security features can be ported to PHP.

Even if it was a 10 day certificate or something that would hold the
customer over until it could be manually processed and he get's a full
subscription.

All I'm concerned about is the automation part. I could deal with it
by using a separate email account that would only be used for this
purpose and grab it on my always-on machine and process it there, but
I hate to have to rely on email for this<g>

>Okay, I see. The "Post to HTTP Server" function can already be used to send
>data to a server. You as a client send a POST request, the server sends a
>response, then closes the connection. This function gives you access to the
>return value (succeeded or failed). The server response per-se is not
>handled at the moment. But it's an interesting idea. I'll see what I can
>do.

I can set the response code via the http_send_status in php and I
presume other languages would have similar options, but I would like
to be able to get the exact value inside SB to determine if this is a
real server error or if I'm sending the server error, i.e. if the
requests get 404 it could be that either the url is wrong, server is
not online or the user is not online. If I get something else I can
figure it out (for http codes see
http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html)

Best would be if I could post a string verification back, that way I
could communicate with the script in a much more reliable way:)

Best regards,

Arnór Baldvinsson
Icetips Creative, Inc.
San Antonio, Texas, USA
www.icetips.com


Subscribe to information from Icetips.com:
http://www.icetips.com/subscribe.php

[NewsArchive]

Hi Arnór,

>>Yes, I agree. But the security aspect has been one of the most important
>>things in the setupPROTECT and sPSDK planning stages. I have to check if
>>the security features can be ported to PHP.
>
> Even if it was a 10 day certificate or something that would hold the
> customer over until it could be manually processed and he get's a full
> subscription.
>
> All I'm concerned about is the automation part. I could deal with it
> by using a separate email account that would only be used for this
> purpose and grab it on my always-on machine and process it there, but
> I hate to have to rely on email for this<g>

What we do in our own SetupBuilder process is, we distribute a "temporary"
subscription key. For example, a customer purchases a new license and the
ordering system sends him a unique serial number (taken from the serial
number list) and a temporary subscription key. This subscription key works
only with a specific build (e.g. 6.7.2010). When we make 6.7.2011
available, the subscription key already expired.

>>Okay, I see. The "Post to HTTP Server" function can already be used to
>>send
>>data to a server. You as a client send a POST request, the server sends a
>>response, then closes the connection. This function gives you access to
>>the
>>return value (succeeded or failed). The server response per-se is not
>>handled at the moment. But it's an interesting idea. I'll see what I can
>>do.
>
> I can set the response code via the http_send_status in php and I
> presume other languages would have similar options, but I would like
> to be able to get the exact value inside SB to determine if this is a
> real server error or if I'm sending the server error, i.e. if the
> requests get 404 it could be that either the url is wrong, server is
> not online or the user is not online. If I get something else I can
> figure it out (for http codes see
> http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html)
>
> Best would be if I could post a string verification back, that way I
> could communicate with the script in a much more reliable way:)

I think we'll be able to get access to the complete server response (if it
is not a real error). You can then do with this string whatever you want.
I'll play with it...

Friedrich

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

Hi Friedrich,

>What we do in our own SetupBuilder process is, we distribute a "temporary"
>subscription key. For example, a customer purchases a new license and the
>ordering system sends him a unique serial number (taken from the serial
>number list) and a temporary subscription key. This subscription key works
>only with a specific build (e.g. 6.7.2010). When we make 6.7.2011
>available, the subscription key already expired.

That's kind of where I'm leaning as well. Obviously your methods
work, so I have no problem learning from you;)

I think with the temp subscription etc. this would work nicely and
then I can automatically issue a permanent key using a bot on the
site.

>I think we'll be able to get access to the complete server response (if it
>is not a real error). You can then do with this string whatever you want.
>I'll play with it...

Awsome! If it's an error, can you stick that into a variable as it
would be beneficial to know for example if the server gives 404 or 200
as in case of 404 there is nothing that can be done about it. I.e.
could you get the server result codes into a var as well? That way I
could put the 404s into a registry key or something and if it happens
multiple times I could detect that either in my software or the
install and handle it somehow. Multiple 404s would indicate a problem
with the user internet connection or something that I could then warn
about or suggest something to fix the problem.

Best regards,

Arnór Baldvinsson
Icetips Creative, Inc.
San Antonio, Texas, USA
www.icetips.com


Subscribe to information from Icetips.com:
http://www.icetips.com/subscribe.php

[NewsArchive]

Hi Arnór,

> I'll ask my C guy about this tonight. I think it would be really,
> really cool in this regard to be able to send requests to a webserver
> and get information back inside a waiting situation in SB.

I analyzed our source code and the functionality to get information back
from a HTTP POST is already there. IMO, there is no code change required in
our HTTP module to support it. We only have to pass the return value
(result of the POST action) to the installer engine.

Do you have a CGI or something like that available that accepts a HTTP Post
and sends information back?

Thanks,
Friedrich

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

Hi Friedrich,

>Do you have a CGI or something like that available that accepts a HTTP Post
>and sends information back?

Well, my keycode generator<g>

As far as I can tell, all you would need is a php that takes the
variables and then does an echo back, i.e.

<?PHP
$user = $_GET['user'];
if ($user==''){
$user = $_POST['user'];
}

//echo "user: $user<br>";
if ($user=="Arnor"){
echo "ok";
}
else{
echo "fail";
}
?>

If you call this php file with the http post you should get the
ok/fail string back. If you are using the POST method it should work
fine as well as GET which you would if you access it directly.

I have put this file up on Icetips - try:

http://www.icetips.com/testsb.php?user=Arnor

http://www.icetips.com/testsb.php?user=Friedrich

The results are "ok" and "fail" respectively.

There may be more to it than that, but that is basically what we do
for SWREG keycode generator. I'm not sure if you would need to get
http headers back to SB, but that's easy with the header() function in
php.

Best regards,

Arnór Baldvinsson
Icetips Creative, Inc.
San Antonio, Texas, USA
www.icetips.com


Subscribe to information from Icetips.com:
http://www.icetips.com/subscribe.php

[NewsArchive]

Hi Arnór,

Perfect. I'll play with it and let you know how it goes.

Thank you for your help!!!

Friedrich

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

Hi Friedrich,

>Perfect. I'll play with it and let you know how it goes.
>
>Thank you for your help!!!

Welcome, let me know if I can do anything else.

One note: SWREG uses special tags around what is being returned, i.e.
they only check out contents that is returned inside those tags,
similar to:

echo "test";
echo "<SBReturn>$Results</SBReturn>";
echo "something";

In this case SB would _ignore everything_ except what is inside the
SBREturn tag, in this case the contents of the $Results variable. The
"test" and "something" would be completely ignored. This makes it
easy to debug the script as you can call it in a browser with the
parameters being sent and check what is going on and what exactly the
script should be returning. If that matches what you get in SB, you
know you're on the rigth track.

Best regards,

Arnór Baldvinsson
Icetips Creative, Inc.
San Antonio, Texas, USA
www.icetips.com


Subscribe to information from Icetips.com:
http://www.icetips.com/subscribe.php

[NewsArchive]

Hi Arnór,

>>Perfect. I'll play with it and let you know how it goes.
>>
>>Thank you for your help!!!
>
> Welcome, let me know if I can do anything else.
>
> One note: SWREG uses special tags around what is being returned, i.e.
> they only check out contents that is returned inside those tags,
> similar to:
>
> echo "test";
> echo "<SBReturn>$Results</SBReturn>";
> echo "something";
>
> In this case SB would _ignore everything_ except what is inside the
> SBREturn tag, in this case the contents of the $Results variable. The
> "test" and "something" would be completely ignored. This makes it
> easy to debug the script as you can call it in a browser with the
> parameters being sent and check what is going on and what exactly the
> script should be returning. If that matches what you get in SB, you
> know you're on the rigth track.

Okay, thanks for that information!

Friedrich

[NewsArchive]

Hi Arnór,

> I have put this file up on Icetips - try:
>
> http://www.icetips.com/testsb.php?user=Arnor
>
> http://www.icetips.com/testsb.php?user=Friedrich
>
> The results are "ok" and "fail" respectively.

It really works. VERY COOL! The installer already had all the information
available, but never used it.

When calling the "Post to HTTP Server..." function, %_SB_ERRORCODE% holds
the returned error code and %_SB_RETURN% holds the server response now.

I'll send you a demo later today.

Thank you for your suggestion!

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

Hi Friedrich,

>It really works. VERY COOL! The installer already had all the information
>available, but never used it.
>
>When calling the "Post to HTTP Server..." function, %_SB_ERRORCODE% holds
>the returned error code and %_SB_RETURN% holds the server response now.
>
>I'll send you a demo later today.

AWSOME! This makes it possible for the webupdate to verify all sorts
of information as well as trigger updates to databases on the server,
such as to log down download information for specific builds for
specific users. Now you can detect if user1 has downloaded build
1.102.001 (or whatever) more than he should and then handle it based
on serial number/subscription key information. For me, this simply
opens up a door to a whole set of new options that I can do with
SetupBuilder!

Best regards,

Arnór Baldvinsson
Icetips Creative, Inc.
San Antonio, Texas, USA
www.icetips.com


Subscribe to information from Icetips.com:
http://www.icetips.com/subscribe.php

[NewsArchive]

Hi Arnór,

> AWSOME! This makes it possible for the webupdate to verify all sorts
> of information as well as trigger updates to databases on the server,
> such as to log down download information for specific builds for
> specific users. Now you can detect if user1 has downloaded build
> 1.102.001 (or whatever) more than he should and then handle it based
> on serial number/subscription key information. For me, this simply
> opens up a door to a whole set of new options that I can do with
> SetupBuilder!

To be frank, I am absolutely thrilled. This new feature is absolutely
amazing. And the core functionality was there since Version 5 (three years
ago).

When you posted your suggestion a few days ago, I though: "Arnór, Arnór,
Arnór, this is really a killer idea". :)

Still playing with it and will send you a demo (that makes use of your
server) soon!

Friedrich

[NewsArchive]

> To be frank, I am absolutely thrilled. This new feature is absolutely
> amazing. And the core functionality was there since Version 5 (three years
> ago).
>
> When you posted your suggestion a few days ago, I though: "Arnór, Arnór,
> Arnór, this is really a killer idea". :)
>
> Still playing with it and will send you a demo (that makes use of your
> server) soon!

I wrote a CMag article about my use of a similar strategy back in Dec 2002
and I *still* use that stuff (not the same code, but the mechanism)
regularly.

http://www.clarionmag.com/cmag/v4/v4n12webvalidate.html if anyone needs to
do this outside of SB.
--

Mark Riffey
http://www.rescuemarketing.com/blog/
The Wall Street Journal staff reads it,

[NewsArchive]

Where are the docs of which Friedrick spake?

I see nothing in the sPSDK folder, and no-one else is asking.

Sim

[NewsArchive]

Sim,

By selecting "Check for Documentation Updates" from within the SetupBuilder
6 IDE, you can get the latest documentation (.chm and .pdf).

Or (see .chm and/or .pdf links):
http://www.lindersoft.com/downloads_licensed.htm

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

Hi Friedrich,

Yes the idea of an update occurred to me, but trying to download I get an
error (verbatim):

"Cannot retrieving list of documentation files from the Internet. Error#:
503010051"

Sim

[NewsArchive]

Hi Sim,

Your firewall blocks access to our server ;-) The SetupBuilder IDE is
blocked and cannot get through to our server. Fix this and you are done.

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

Hi Mark,

> I wrote a CMag article about my use of a similar strategy back in Dec 2002
> and I *still* use that stuff (not the same code, but the mechanism)
> regularly.
>
> http://www.clarionmag.com/cmag/v4/v4n12webvalidate.html if anyone needs to
> do this outside of SB.

Very interesting article! Thanks for the link.

Friedrich

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

Hi Arnór,

I have uploaded a simple small SetupBuilder application to demonstrate the
enhanced "Post HTTP" functionality.

You can download the code-signed application at:

http://www.lindersoft.com/PostHTTP.exe

Of course, the application does not do anything with your system. See
attached source-code screenshot.

Start the application and you can select between "Arnór" or "Friedrich"
options.

The option "Arnór" posts "user=Arnor" to the web server. The web server
returns "ok". In this test case, an update is allowed.

The option "Friedrich" posts "user=Friedrich" to the web server. The web
server returns "fail". In this test case, an update is NOT allowed.

What do you think?

Friedrich

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

Hi Friedrich,

>What do you think?

AWSOME! Works like a charm:)

Best regards,

Arnór Baldvinsson
Icetips Creative, Inc.
San Antonio, Texas, USA
www.icetips.com


Subscribe to information from Icetips.com:
http://www.icetips.com/subscribe.php

[NewsArchive]

Hi Arnór,

>>What do you think?
>
> AWSOME! Works like a charm:)

COOL! I'll make a new SetupBuilder maintenance build available later this
week.

Thanks again for your help! :)

Friedrich

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

Hi Friedrich,

>COOL! I'll make a new SetupBuilder maintenance build available later this
>week.

Another "Arnor build" is always welcome<g>

Best regards,

Arnór Baldvinsson
Icetips Creative, Inc.
San Antonio, Texas, USA
www.icetips.com


Subscribe to information from Icetips.com:
http://www.icetips.com/subscribe.php

[NewsArchive]

Hi Arnór,

> Another "Arnor build" is always welcome<g>

<BG> :)

Friedrich