hide/compile vbscript

Other people are using my vbscript to retrieved files remotely. Is there anyway to hide the code so they won't be able to read the code (the userid and password is in the code).
Thanks
ATY

Check out AutoIt from www.hiddensoft.com. It allows you to compile a script file to .exe file and/or encrypt it.

Just a second thought, from whom do you want to hide the userId and password ? What does your code script primarily design to do ? Would the idea of creating a dedicated account for whatever purpose your script serves be a reasonable solutions and that the account ONLY has the necessary (and not over) permissions or privileges to do what it should do ?

If what you want to do is to hide the userID and password from average users, you could perhaps scramble the userID and password with manipulated strings so that it is not that EASY to immediately spot what their original values are. Of course, this would be useless for people with VBS knowledge.

For example, you could do something like the following.

temp = "Kx,26aVb^kD@#@&B4YO2=zzSAhc\kk;CV(lkk^/^.bwOR1G:JYG2bmRCdagPrh("
password = mid(right(left(mid(temp,25,37),13),7),4,2) & chr(mid(temp,4,2))

password will be "k;#8594;"

The idea is to constructe your userId and/or password in different places within the scripts so that it is NOT easy (not impossible, obviously) for average uers to immediately SEE what they are. You can even do that from within a subroutine and/or functions with various builtin functions like left, right, mid, asc, chr etc. With some careful design, it could be useful in some situations.

It is never a good idea to put a username/password in a script. There is no built in way to reliably encrypt a vbs. MS has a script encoder, look at technet.com, but this is easily decoded. As Token says, you can use AutoIT which has the ability to compile and encrypt an AutoIT script. But that is another language to learn, which is not too difficult. I have created an AutoIT exe that basically called a vbs with elevated privlidges. But like I said, that is combining 2 different languages and will require 2 different files. Alternativly you can check out [url]www.adminscripteditor.com[/url]. This is a script editor which has the ability to compile vbscript files. I have not used the compile function so do not know how good/bad it is.

Fixed url

I use the MS script encoder myself. It is all I really need since our regular users wouldn't understand how to decode it anyway. I also use NTFS on the folder that contains my scripts to limit access to Domain Admins as well.

That's such a great idea Token. Thank you all

One problem I see with using tokens method is that you can still easily get the password. All you would need to do is throw up a msgbox and you got it. You might need to understand vbs or understand programming, but it can be done.

No problem. Make sure you understand the implications of using this type of work-around ;)

mbouchard, yeah.. so don't tell them ;)

It was never meant to be anywhere near a secured or reliable method of protection (depending on who your audiences are), but it works for some.

The script is for regular users.

Mike,
I couldn't get to the site you provided.
http://www.adminscripteditor.com./ (ip address cannot be used for browsing). Thanks

Was there a trailing dot at the end of the URL ?

duh....

stupid me...Thanks

Bah, that shows me for not using the url tags. Fixed in the post

[}:)]

Take a look on ScriptCryptor compiler from http://www.abyssmedia.com/scriptcryptor/index.shtml
It convert VBS files to native EXE files and doesn't create any temporary files during execution.
Moreover, it support WScript object.

You can try ExeScript or ExeScript Editor. This programs will not extract your script to disk (with Execution type=Compile). The content of your output EXE will be encrypted. Also you can password protect your output EXE file file, so you can safely use any passwords in your scripts.