>Jos,
>
>We know that a vfp app contains enough detail to rebuild a complete source project because Refox can do it. If "protection" just consists of building a wall around the exe, all you need to do is persuade the running VFP app to execute a line of your own code and you can peel out the project. I'm not talking just a few bits and pieces or selective interpretation, I'm talking about harvesting the complete project with all its vcx, scx, reports, dbfs, whatever. If you can't do it in 5 minutes using the dbc exploit you can do it in 10 minutes using Winhex.
>
>IMHO the only purpose of a wall is to dissuade casual hackers and create a brief nuisance for determined hackers. If the project is still buried in there then you've only got to sneak past the wall somehow and you've got it all.

You miss my point; I dont care what you do, if the app runs on an attackers machine they have it. It may not be the exact same code you wrote but they will have all they need to re-produce it. And your secret keys, and passwords, and whatever else.