How to protect Javascript code from copying by Ajax method

How to protect Javascript code from copying by Ajax method
by Janeth Kent Date: 24-06-2013 javascript ajax jquery websecurity script tutorial


Today, in this mini tutorial we will introduce a simple method to protect javascript code from copying.

IMPORTANT: We are not sure this method will protect javascript 100% but it will be better than do nothing ;-D

As we said, this method is very simple: basically we have to combine AJAX method with little server-side script to prevent visitors access javascript file directly.

Let's explain our method:

		
 	<!DOCTYPE html>
 
 	<html>
 
 	<head>
 
 	<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
 
 	<title>Protecting Javascript Code From Copying</title>
 
 	 
 
 	<!-- jQuery Library 1.8.3 -->
 
 	<script type="text/javascript" src="js/jquery/jquery.min.183.js"></script>
 
 	 
 
 	<script type="text/javascript">
 
 	 
 
 	$(document).ready(function(e) {   
 
 	  function MyJSFunction() {
 
 	    alert("This is my script, you can not copy this!");
 
 	  }
 
 	  // Show Alert
 
 	  MyJSFunction();  
 
 	});
 
 	</script>
 
 	</head>
 
 	 
 
 	<body>
 
 	  Protecting Javascript Code From Copying.
 
 	</body>
 
 	</html>
						
					
	

 

So, we have a javascript function called MyJSFucntion that we don't want users view it.

When users access the page they will see an alert message. Then users want to see the javascript code that is used to trigger the alert message so they will use “view page source” or “inspect element” or “firebug”.

But the question is we don't want anyone see our javascript code so we'll put the javascript code into a php file ( js-protect.php ).

Then we use an AJAX method to load the php file.

js-protect.php content:

		
 	<script type="text/javascript">
 
 	function MyJSFunction() {
 
 	  alert("This is my script, you can not copy this!");
 
 	}  
 
 	// Show Alert
 
 	MyJSFunction();
 
 	</script>
						
					
	

The AJAX code to load js-protect.php file in “js/” folder ( we use jQuery ):

		
 	<script type="text/javascript">
 
 	$(window).load(function() {
 
 	  $.ajax({
 
 	    url: 'js/js-protect.php',
 
 	    type:'POST',
 
 	    cache: false,
 
 	    success: function(data){
 
 	      if(data){
 
 	        $('body').append(data);
 
 	      }
 
 	    }
 
 	  });
 
 	})
 
 	</script>
						
					
	

 

Now, when users view source code of the page they will not see the javascript we wrote.

But, some experient user may be know the link of js.php file by which they can access the file directly.

To protect javascript from this "intrusion" we will use a simple validating method to check referer link. If the referer link is the index page we will allow them to access the javascript code otherwise we will show them another content.

Changing the js-protect.php file:

		
 	<?php
 
 	  $referer = $_SERVER['HTTP_REFERER'];
 
 	  // Check URL
 
 	  if ( $referer=='http://ma-no.org/free/demo/demo-protect.php' ) {
 
 	?>
 
 	 
 
 	<script type="text/javascript">
 
 	function MyJSFunction() {
 
 	  alert("This is my script, you can not copy this!");
 
 	}  
 
 	// Show Alert
 
 	MyJSFunction();
 
 	</script>
 
 	 
 
 	<?php }
 
 	// If strange url
 
 	else { ?>
 
 	    Sorry! You can not see this content. Please go to <a href="http://ma-no.org">MA_NO.ORG</a><br />
 
 	<?php } ?>
						
				

The index page ( demo.php ):

		
 	<!DOCTYPE html>
 
 	<html>
 
 	<head>
 
 	<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
 
 	<title>Protecting Javascript Code From Copying</title>
 
 	 
 
 	<!-- jQuery Library 1.8.3 -->
 
 	<script type="text/javascript" src="js/jquery/jquery.min.183.js"></script>
 
 	 
 
 	<script type="text/javascript">
 
 	$(window).load(function() {
 
 	  $.ajax({
 
 	    url: 'js/js-protect.php',
 
 	    type:'POST',
 
 	    cache: false,
 
 	    success: function(data){
 
 	      if(data){
 
 	        $('body').append(data);
 
 	      }
 
 	    }
 
 	  });
 
 	})
 
 	</script>
 
 	</head>
 
 	 
 
 	<body>
 
 	  Protecting Javascript Code From Copying.
 
 	</body>
 
 	</html>
						
					
	

 

Our work is completed!

 
by Janeth Kent Date: 24-06-2013 javascript ajax jquery websecurity script tutorial hits : 9585  
 
Janeth Kent

Janeth Kent

Licenciada en Bellas Artes y programadora por pasión. Cuando tengo un rato retoco fotos, edito vídeos y diseño cosas. El resto del tiempo escribo en MA-NO WEB DESIGN END DEVELOPMENT.

 
 
 

Related Posts

Difference between arrow and normal functions in JavaScript

In this tutorial we are going to see how arrow functions differ from normal JavaScript functions. We will also see when you should use one and when you should use…

JavaScript Arrow functions: What they are and how to use them

In this article we are going to see what they are and how to use JavaScript Arrow Functions, a new feature introduced with the ES6 standard (ECMAScript 6). What are Arrow…

How to insert an element into an array with JavaScript

In this brief tutorial you will learn how to insert one or more elements into an array with JavaScript. For this we will use the splice function. The splice function will not…

What is the difference between primitives types and objects in JavaScript?

In this short tutorial we are going to look at the differences between primitive types and objects in JavaScript. To start with, we're going to look at what primitive types…

How to get DOM elements with JavaScript

When you access any element of the DOM, it is usual to save it in a variable. This is something that at first might seem very simple, but if you…

How to reverse an array in JavaScript

In this tutorial we are going to see how you can change the order of the elements of an array so that they are inverted. You could use a loop…

How synchronize the scroll of two divs with JavaScript

In case you have two divs of different sizes you may sometimes want to scroll both at the same time but at different speeds depending on their size. For example,…

How to use the codePointAt method in JavaScript

The JavaScript codePointAt method has more or less the same function as the charCodeAt method, used to get the 16-bit Unicode representation of the character at a certain position in…

How to check if a value is a number in JavaScript

In this short tutorial we are going to look at the various methods that exist to find out if a value is a number in JavaScript.   1. Using the isNaN() function   One…

How to use the charCodeAt method in JavaScript

The charCodeAt method is accepted by strings in JavaScript, returning the 16-bit Unicode code of the character at the position we pass as a parameter to the method. The charCodeAt method…

How to use the charAt method in JavaScript

The charAt method is accepted by strings in JavaScript, returning the position of the character passed as a parameter within the string. If the string contains multiple occurrences of the character…

Strings in JavaScript: What they are and how to use them

In this tutorial we are going to explain what strings are and how they are used in JavaScript. The tutorial is intended for people who are learning to program in…

We use our own and third-party cookies to improve our services, compile statistical information and analyze your browsing habits. This allows us to personalize the content we offer and to show you advertisements related to your preferences. By clicking "Accept all" you agree to the storage of cookies on your device to improve website navigation, analyse traffic and assist our marketing activities. You can also select "System Cookies Only" to accept only the cookies required for the website to function, or you can select the cookies you wish to activate by clicking on "settings".

Accept All Only sistem cookies Configuration