Jos,

We know that a vfp app contains enough detail to rebuild a complete source project because Refox can do it. If "protection" just consists of building a wall around the exe, all you need to do is persuade the running VFP app to execute a line of your own code and you can peel out the project. I'm not talking just a few bits and pieces or selective interpretation, I'm talking about harvesting the complete project with all its vcx, scx, reports, dbfs, whatever. If you can't do it in 5 minutes using the dbc exploit you can do it in 10 minutes using Winhex.

IMHO the only purpose of a wall is to dissuade casual hackers and create a brief nuisance for determined hackers. If the project is still buried in there then you've only got to sneak past the wall somehow and you've got it all.