Wordpress Plugins Encrypted

13 replies
If I understand correctly, most plugins for wordpress are encrypted, and the main reason for this is the GPL license saying that any add-ons to wordpress are considered derivative works that can be redistributed. So by encrypting the derivative works, people get around the license issue by controlling distribution such as by requiring activation or sending a "call back" when a new installation is created.

I would also assume a disadvantage to this method is that the source code if limited in what can be edited, so for a programmer who wants to update or improve a plugin, they are mostly out of luck due to the encryption. From a design point of view, I understand there is still flexibility, but the programming aspect is limited.

So the overall business model for most people who make wordpress plugins is they charge for something added to a free product.

I find this interesting because we have never encrypted any of our works. We charge for the product, but then people can also charge for derivative works without worry that others can distribute them for free, because the initial license does dictate this.

On the other hand, if someone got a hold of the source code or unencrypted a product in the future, I would assume the whole business model could be blown because people could then redistribute with impunity.

Do you find any misstatements or lack of understanding in my description?
#encrypted #plugins #wordpress
  • Profile picture of the author Gail Sober
    I think the majority of plugins are NOT encrypted. I just went through a bunch of mine to verify and they weren't.

    Maybe some of the retail ones are but these I get from the Wordpress site.

    I would not be comfortable using anything that came from someone else that was encrypted at all, whatsoever!
    {{ DiscussionBoard.errors[4040313].message }}
  • the main reason for this is the GPL license saying that any add-ons to wordpress are considered derivative works that can be redistributed.
    that is a false statement, or you could you provide a link to something stating this?

    wordpress plugins are mostly original code and that is easily copyrighted

    what wordpress had problems with were people copying large parts of wordpress code and including it in their product for distribution

    all plugins are copyright their developer unless otherwise noted, no? I've never heard different.
    Signature


    {{ DiscussionBoard.errors[4040561].message }}
    • Profile picture of the author dvduval
      Originally Posted by digitalproductreporter View Post

      that is a false statement, or you could you provide a link to something stating this?

      wordpress plugins are mostly original code and that is easily copyrighted

      what wordpress had problems with were people copying large parts of wordpress code and including it in their product for distribution

      all plugins are copyright their developer unless otherwise noted, no? I've never heard different.
      Yes, here is one such link
      WordPress GPL License Explained for Theme and Plugin Developers
      There are more like this.

      It appears that someone can not only remove credits for who coded it, but can also redistribute the plugin with impunity.

      This seems to especially be true if a plugin is submitted and listed on the wordpress website. It also seems that if even a single wordpress function is called (ex. to connect the code with the wordpress admin interface) there would be at least some "doubt" as to whether or not the GPL license would then be applied to the plugin.

      Ex. in the Wordpress GPL
      You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program or any part thereof, to be licensed as a whole at no charge to all third parties under the terms of this License.
      So if you included an item in the wordpress admin interface, or created a theme that uses the theme system in wordpress, would that not be "derived" and subject to the GPL?

      I'm not trying to be disrespectful to any wordpress plugin developers here. I just am quite astounded at some of the implications contains in the wordpress GPL license.

      Now with regard to other items that are "contained" in wordpress that have their own gpl, such as TinyMCE that have their own original GPL licenses, it seems those might be handled differently, and one could make add-ons or plugins to those. But working with the theme system or admin interface seems sketchy at best when trying to claim freedom from the wordpress GPL. Am I right in this assertion?
      Signature
      It is okay to contact me! I have been developing software since 1999, creating many popular products like phpLD.
      {{ DiscussionBoard.errors[4040718].message }}
  • Profile picture of the author VegasGreg
    If I understand correctly, most plugins for wordpress are encrypted
    If I understand correctly, most of the plugins for Wordpress are NOT encrypted.

    Maybe a lot of the "paid" or "premium" plugins are encrypted?

    But most of the time there are free plugins available that do the same thing as the paid versions. (Not always, but a lot of the time)
    Signature

    Greg Schueler - Wordpress Fanatic... Living The Offline Marketing Dream...

    {{ DiscussionBoard.errors[4041301].message }}
  • encrypting is against the gpl anyway so if a plugin was gpl i think you could request a copy of the unencrypted version

    So if you included an item in the wordpress admin interface, or created a theme that uses the theme system in wordpress, would that not be "derived" and subject to the GPL?
    the first link you included was an opinion piece from someone imho is misinformed about the license, you can google just as many that think the opposite

    the second thing you quoted was to distribute something on the wordpress site, and it makes sense they only allow things on their site with a similar license to their own

    I think it would fall into "does the majority of the code in the plugin use wordpress code?" and if the answer is yes then it's a derivative work, however if it's no then you should contact a lawyer or the copyright holder before redistributing.
    Signature


    {{ DiscussionBoard.errors[4041372].message }}
  • Profile picture of the author Wolfster
    I suspect a fair number of scenarios have not yet been adequately tested in court to know whether your interpretation is right or not. I read recently that some of the standard claims of many software licenses for major software developers, like Microsoft, Autodesk, etc., have not even been adequately tested in court yet ...

    In any case, I'd suggest that the safest and most responsible approach is to respect everyone's and anyone's claim to intellectual property to the greatest extent one can muster, whether one thinks one is really required to do so by law or not.
    Signature

    Check it out. Take the leap.

    http://farleyventures.com/leapfrogtwist

    {{ DiscussionBoard.errors[4041420].message }}
    • Profile picture of the author dvduval
      Originally Posted by Wolfster View Post

      I suspect a fair number of scenarios have not yet been adequately tested in court to know whether your interpretation is right or not. I read recently that some of the standard claims of many software licenses for major software developers, like Microsoft, Autodesk, etc., have not even been adequately tested in court yet ...

      In any case, I'd suggest that the safest and most responsible approach is to respect everyone's and anyone's claim to intellectual property to the greatest extent one can muster, whether one thinks one is really required to do so by law or not.
      So let's say it came down to a case of enforcement of a DMCA. The plugin developer has found that someone is using the plugin because it was redistributed freely. Then the send a DMCA to the host. Then the other party says to the host, "Here is a link to a page right on the wordpress site that says derivative works are covered under the GPL and the plugin developer's claim is invalid". What would happen in the scenario? Is there any guarantee the hosts will side with the plugin developer?
      Signature
      It is okay to contact me! I have been developing software since 1999, creating many popular products like phpLD.
      {{ DiscussionBoard.errors[4041902].message }}
  • It depends.

    Most wordpress plugins are relatively easy to 'duplicate' if someone had the time or money, so I'd say no. However, for paid plugins where the developer has spent considerable resources putting something together, I'd say yes.

    It's also the business model you choose. You (personally) can get away with it, because of how you've built a 'community' with the product, and you actually have others building on it. If someone was to steal it, it would be difficult for them to resell it because they don't have the 'connections'. And if they did -- since your source code is so 'large', it would require a significant effort to rewrite it (so you couldn't go after them and say sue them and/or shut them down for stealing your code and passing it off as their own).

    However, if you had been making that in your basement the last year, then finally released it, and it was more of a one time thing, then it would be a different equation.
    Signature
    Pick a product. Pick ANY product! -> 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9
    {{ DiscussionBoard.errors[4041925].message }}
  • Profile picture of the author Gail Sober
    Then the other party says to the host, "Here is a link to a page right on the wordpress site that says derivative works are covered under the GPL and the plugin developer's claim is invalid". What would happen in the scenario? Is there any guarantee the hosts will side with the plugin developer?
    That's a counter-notification

    If a subscriber provides a proper "counter-notice" claiming that the material does not infringe copyrights, the service provider must then promptly notify the claiming party of the individual's objection. [512(g)(2)] If the copyright owner does not bring a lawsuit in district court within 14 days, the service provider is then required to restore the material to its location on its network. [512(g)(2)(C)]
    Source: Sample Copyright Complaint Steps
    {{ DiscussionBoard.errors[4046243].message }}
  • Profile picture of the author dvduval
    @Gail, it sounds like it might go something like this:
    1. Person installs wordpress plugin without purchasing it
    2. Creator of plugin notices the installation and files a DMCA with the host
    3. The person files a counter claim saying they have a right to install based on the wordpress GPL
    4. The creator of the plugin must either file suit or give up their claim

    Am I correct?
    Signature
    It is okay to contact me! I have been developing software since 1999, creating many popular products like phpLD.
    {{ DiscussionBoard.errors[4047091].message }}
  • Profile picture of the author Brian Alaway
    It would be great if some of those who have sold premium plugins would comment. I've wondered too about this and even more so after the nasty yoast vs wpmu dev spat.
    {{ DiscussionBoard.errors[4047283].message }}
  • Profile picture of the author wrongnumber
    lets get this straight... all wordpress plugins are written in php... and unlike some other programming languages, php is worst in dealing with source code security (if its an application to be delivered to a client... like a plugin...) though php never renders it source code to the user, but the owner is free to play around the source code... a major drawback... unlike c/c++/java there aren't any runtime classes and executables generated separately, which cannot be modified by the client... now the maximum you can do with the source code is... encrypt and obfuscate... but still the code is pretty much legible... and can be decrypted and deobfuscated by any serious programmer...

    Hope that helps...
    {{ DiscussionBoard.errors[4047353].message }}
  • Profile picture of the author Gail Sober
    @Gail, it sounds like it might go something like this:
    1. Person installs wordpress plugin without purchasing it
    2. Creator of plugin notices the installation and files a DMCA with the host
    3. The person files a counter claim saying they have a right to install based on the wordpress GPL
    4. The creator of the plugin must either file suit or give up their claim

    Am I correct?
    That's the way I read it.

    You gotta remember, the host is not a judge and jury, they simply follow the law and you as the accused are allowed your day in court.
    {{ DiscussionBoard.errors[4047393].message }}

Trending Topics