安全 - 如何保护更多答案

【问题标题】：Security - How to secure more安全 - 如何保护更多
【发布时间】：2018-07-26 13:18:05
【问题描述】：

我目前正在为我的客户开发一个 Excel 文档，并且 VBA 上的安全性得到很好的保护非常重要。他们不打算查看这份文件。所以我在搜索如何绕过 VBA 密码，我发现了一个宏，它超过了旧密码。

我的问题：有没有办法禁用下面的宏？

模块 1：

Option Explicit

Private Const PAGE_EXECUTE_READWRITE = &H40

Private Declare Sub MoveMemory Lib "kernel32" Alias "RtlMoveMemory" _
    (Destination As Long, Source As Long, ByVal Length As Long)

Private Declare Function VirtualProtect Lib "kernel32" (lpAddress As Long, _
    ByVal dwSize As Long, ByVal flNewProtect As Long, lpflOldProtect As Long) As Long

Private Declare Function GetModuleHandleA Lib "kernel32" (ByVal lpModuleName As String) As Long

Private Declare Function GetProcAddress Lib "kernel32" (ByVal hModule As Long, _
    ByVal lpProcName As String) As Long

Private Declare Function DialogBoxParam Lib "user32" Alias "DialogBoxParamA" (ByVal hInstance As Long, _
    ByVal pTemplateName As Long, ByVal hWndParent As Long, _
    ByVal lpDialogFunc As Long, ByVal dwInitParam As Long) As Integer

 Dim HookBytes(0 To 5) As Byte
 Dim OriginBytes(0 To 5) As Byte
 Dim pFunc As Long
 Dim Flag As Boolean

 Private Function GetPtr(ByVal Value As Long) As Long
     GetPtr = Value
 End Function

 Public Sub RecoverBytes()
     If Flag Then MoveMemory ByVal pFunc, ByVal VarPtr(OriginBytes(0)), 6
 End Sub

 Public Function Hook() As Boolean
Dim TmpBytes(0 To 5) As Byte
Dim p As Long
Dim OriginProtect As Long

Hook = False

pFunc = GetProcAddress(GetModuleHandleA("user32.dll"), "DialogBoxParamA")


If VirtualProtect(ByVal pFunc, 6, PAGE_EXECUTE_READWRITE, OriginProtect) <> 0 Then

    MoveMemory ByVal VarPtr(TmpBytes(0)), ByVal pFunc, 6
    If TmpBytes(0) <> &H68 Then

        MoveMemory ByVal VarPtr(OriginBytes(0)), ByVal pFunc, 6

        p = GetPtr(AddressOf MyDialogBoxParam)

        HookBytes(0) = &H68
        MoveMemory ByVal VarPtr(HookBytes(1)), ByVal VarPtr(p), 4
        HookBytes(5) = &HC3

        MoveMemory ByVal pFunc, ByVal VarPtr(HookBytes(0)), 6
        Flag = True
        Hook = True
    End If
End If
 End Function

 Private Function MyDialogBoxParam(ByVal hInstance As Long, _
         ByVal pTemplateName As Long, ByVal hWndParent As Long, _
         ByVal lpDialogFunc As Long, ByVal dwInitParam As Long) As Integer
     If pTemplateName = 4070 Then
         MyDialogBoxParam = 1
     Else
         RecoverBytes
         MyDialogBoxParam = DialogBoxParam(hInstance, pTemplateName, _
                            hWndParent, lpDialogFunc, dwInitParam)
         Hook
     End If
 End Function

模块 2（并运行这个）

 Sub unprotected()
     If Hook Then
         MsgBox "VBA Project is unprotected!", vbInformation, "*****"
     End If
 End Sub

【问题讨论】：

Office 文档中的 VBA 不安全，无法有效保护。如果您需要真正的安全性，则必须将代码编译成 dll（即使这样，例如，如果您使用 .NET，也不能保证）。
如果你想提高文档的安全性，那么就对代码进行模糊处理，让它变得非常难以理解。
@FlorentB。对于客户看不到的 2 行来说，它真的很重要。可以改成汉字吗？还是不能结合多种语言？
@Karel Jansen，是的，可以将字符串编码为不可读的字符。
@FlorentB。你能提供有关它的详细信息吗？我真的很想这样做！

标签： vba excel

【解决方案1】：

1) 代码不适用于较新版本的 excel

2) 十六进制编辑器会让你哭泣 Excel VBA Password via Hex Editor

3) @TimWilliams 评论也适用

【讨论】：