Loaders for ionCube Secured Files
Using ionCube encoded and secured PHP files requires a file called the ionCube Loader to be installed on the web server and made available to PHP. PHP can use the Loader with one line added to a PHP configuration file (php.ini). An automated Installer and Wizard are available to help with install, as well as manual instructions. Loaders are for 32 and 64 bit x86 based systems unless otherwise specified. The Windows non-TS Loaders are for use on a Windows system where a phpinfo page shows that PHP is built with thread safety disabled.
If you need Loaders for platforms not mentioned please contact us. Note that different distributions of Linux, e.g. CentOS, SuSE, Debian, RedHat etc. are all covered by the 32 and 64 bit Linux Loaders.
Installing with the Loader Installer or Loader Wizard (recommended)
It is recommended to install a Loader using the Loader Installer. The Installer is a Windows application that can deploy a Loader automatically to any supported operating system over FTP or SFTP. If this cannot be used, we also provide a Loader Wizard PHP script that gives guidance on installing manually.
Loader Installer: ZIP
To use the Wizard, 1) download and install the script into your web space, then 2) launch the script in your browser. The Wizard will give guidance on selection and installation of the correct Loader package.
Manual Install - Which Download Do I Need?
Archives are available for each supported server platform. If you are unsure of the server platform (e.g. Linux or FreeBSD) and architecture (e.g. x86 or x86-64), your hosting company will be able to tell you.
Loader Packages
Linux Loaders also include support for vulnerability protection and PHP error reporting via the ionCube24 platform.
Loader Downloads API
Are you a hoster or package maintainer and would like API access to historical releases? Contact us and let us know.
Production Loaders
| OS/Platform | Packages | Version | Release Date | |
|---|---|---|---|---|
| Windows VC9 (32 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| Windows VC9 (Non-TS) (32 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| Windows VC11 (32 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| Windows VC11 (Non-TS) (32 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| Windows VC11 (64 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| Windows VC11 (Non-TS) (64 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| Windows VC14 (32 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| Windows VC14 (Non-TS) (32 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| Windows VC14 (64 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| Windows VC14 (Non-TS) (64 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| Windows VC15 (32 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| Windows VC15 (Non-TS) (32 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| Windows VC15 (64 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| Windows VC15 (Non-TS) (64 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| Linux (32 bits) |
tar.gz | zip | 10.2.4 | 2018-07-27 |
| Linux (64 bits) |
tar.gz | zip | 10.2.4 | 2018-07-27 |
| Linux Armv7l (e.g. Raspberry Pi2) (armv7l 32 bits) |
tar.gz | zip | 10.2.4 | 2018-07-27 |
| FreeBSD 6 (32 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| FreeBSD 6 (64 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| FreeBSD 7 (32 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| FreeBSD 7 (64 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| FreeBSD 8 (32 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| FreeBSD 8 (64 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| FreeBSD 9 (32 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| FreeBSD 9 (64 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| FreeBSD 11 (32 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| FreeBSD 11 (64 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| OpenBSD 4.5 (32 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| OpenBSD 4.6 (32 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| OpenBSD 4.7 (64 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| OS X (32 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| OS X (64 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
| Solaris (32 bits) | tar.gz | zip | 10.2.4 | 2018-07-27 |
Wordpress Plugin Of The Month:
Secure & Monitor Your Website
Protect against intrusion, exploits and malware.
Block threats instantly, 24/7, no scanning required.
Know when something goes wrong
with regional Web, Mail and DNS monitoring.
PHP and JavaScript error capture helps
you find and fix website errors.
Start your Free Trial at
ioncube24.com
Recent Loader Changes
| 2018-07-27 | 10.2.4 | Added FreeBSD 11, both 32 and 64 bit, as new standard platforms. IC24: Fix for a possible crash in PHP 7 when an attempt is made to open a file on a path in the trusted include paths list and the file does not actually exist. |
| 2018-07-18 | 10.2.3 | Fix for possible memory leak with closures in the PHP 7.0-7.2 loaders. Fix for obfuscated versions of built-in functions not being found in thread-safe PHP 7.0-7.2. Fix for possible invalid memory access when a generator is unset or otherwise terminates prematurely in PHP 7.1 and 7.2. Fix for possible segmentation fault when running PHP 5.0-encoded files on 5.4-5.6. |
| 2018-06-22 | 10.2.2 | Fix for a crash that could occur when using cloned objects in PHP versions prior to 7.0. Fix for a crash occurring when using dynamic key functions with arguments for PHP versions prior to 7.0. Fix for a crash that could occur when using the allow-reflection options (not including the allow-reflection-all option). Fix for a crash that could occur for dynamically defined functions (such as defined within if-statements) in PHP 7.0-7.2. Correction for memory leaks occurring as a result of method calls in the PHP 7.0-7.2 Loaders. |
| 2018-05-03 | 10.2.1 | Fix for a crash that could occur if there was a mismatch between a parent method signature and a child method signature. Improvements to memory consumption. |
| 2018-03-07 | 10.2.0 | Loaders for PHP 7.2 encoding produced by the new 10.2 Encoders. Fix for an issue in the PHP 7.1 and 7.2 Loaders whereby a return type could cause referenced parameters to break. Fix corresponding to the fix for PHP bug 69676 (https://bugs.php.net/bug.php?id=69676). |
| 2018-01-17 | 10.1.1 |
Fix for a fault in the PHP 7.0 Loader that could occur where a function was called with more arguments than in its definition. Changes made corresponding to the fix for PHP bug number 74862 for PHP versions 7.1.13 and PHP 7.2.1. Improved error message when the user is attempting to run a 5.6 or earlier encoded script on PHP 7.1 or later. |
| 2017-12-14 | 10.1.0 |
Loaders for PHP 7.2. Support for bundled encodings, a feature that will be included in a minor update of the version 10 Encoder. Improvements to error messages produced when a 7.1-encoded file is read by a Loader for an earlier version of PHP. Fix for an issue whereby private methods could be wrongly overridden with inheritance and dynamic decoding. IC24: Notices plus strict and deprecated warnings are no longer reported if they are masked by @ or the error reporting level. |
| 2017-11-01 | 10.0.4 | Fix for issue in PHP 5.5 and 5.6 where a crash could occur under certain conditions. IC24 improvements. |
| 2017-09-26 | 10.0.3 | Fix for issue in PHP 7.1 where getting the default values of parameters can randomly fail. Fix for issue in PHP 7.1 where an array value could be assigned to the next element where the array has "holes" i.e. numeric indexes of the array that do not have values. Fix for issue in PHP 7.1 where a call to a stored procedure can lead to an incorrect "unbuffered queries are active" error. Improvement to the error message produced by the PHP 7.1 Loader when encountering a file not produced by the PHP 7.1 Encoder. IC24: New ic24.sec.initial_state ini option to configure whether security is enabled or not upon cache creation. IC24: New ic24.sec.initial_action ini option to determine how new and modified files should be treated when about to execute. IC24: New ic24.sec.initial_notify ini option to flag whether a notification should be generated when execution is attempted of a new or modified file. Other IC24 improvements. |
| 2017-09-11 | 10.0.2 | Fix for issue where, with the PHP 7.0 and 7.1 Loaders, reading unencoded files on Windows could crash. Fix for issue with the PHP 7.1 Loader where a crash may occur when running a function to generate a dynamic key. |
| 2017-08-31 | 10.0.1 | Fix for issue where a primary script with an external key that is obtained via a URL will fail. Fix for issue where, if an external key is set in two separate license files with the same property but different values, then decoding will fail. Fix for issue where setting encoded paths could lead to segmentation faults in some cases on PHP 7.0 and 7.1. |
| 2017-08-02 | 10.0.0 | Loader 10.0.0 released. These are loaders to run files produced by the forthcoming version 10 ionCube PHP Encoder. Included are loaders for PHP 7.1. Those will only run files produced by the version 10 encoder for PHP 7.1. |
| 2017-05-24 | 6.1.0 | Loader 6.1.0 released. Fix for issue related to use of include file protection combined with a callback file. Fix for issue where setting encoded paths can lead to segmentation faults on PHP 7 in some cases. IC24: Support for the ioncube24 part of the Loader on PHP 7.0 IC24: Switch to a single cache file. IC24: Internal changes to support future features and enhancements. |
| 2017-01-26 | 6.0.9 | Loader 6.0.9 released which fixes an issue where, in PHP 7.0, an "Unsupported constant expression" error occurs rather than the correct execution of the script. |
| 2016-12-15 | 6.0.8 | Loader 6.0.8 released which fixes an issue where, in PHP 7.0, a dynamic key on a method could wrongly lead to a call from that method to a private method being prevented. |
| 2016-12-02 | 6.0.7 | Fix for three issues. Firstly, for the incorrect registration of certain Loader ini settings. Secondly, for the getFileName reflection API function sometimes producing a crash in the PHP 7 Loader. Lastly, for a build issue with the PHP 5.2 and below loaders. |
| 2016-10-24 | 6.0.6 | Loader 6.0.6 has been released to complement upcoming Encoder release 9.0.4. The new Encoder and Loader provide a fix for PHP 5.6 encoding where instances of __DIR__ and __FILE__ were not converted properly to the location of the encoded file at runtime. |
| 2016-10-07 | 6.0.5 | Fix for an issue with the PHP 7 Loader where nested encapsulated strings may cause a fault. |
| 2016-09-23 | 6.0.4 | Fix for an issue with the PHP 7 Loader where, if a conditionally defined function was protected by a dynamic key, then the dynamic key may not be found. |
| 2016-09-19 | 6.0.3 |
Fix for issue with the PHP 7 Loader if, in the original 5.6 code, a function parameter
had the form ($param)i.e. a variable with an extra pair of brackets around it. |
| 2016-09-16 | 6.0.2 | Fix for possible crash with obfuscated functions on PHP 7. |
| 2016-09-15 | 6.0.1 | Support for PHP 7. The new PHP 7 ionCube Loaders will run files produced by the version 9 PHP 5.6 Encoder. |
| 2016-03-22 | 5.1.2 | ionCube24 Fix for potential issue with over 3000 cache entries. |
| 2016-02-07 | 5.1.1 | ionCube24 New feature for realtime reporting of PHP errors and uncaught exceptions to ionCube24. |
| 2016-01-26 | 5.0.23 | ionCube24 Resolve link issue with some Linux setups. |
| 2016-01-20 | 5.0.22 | ionCube24 Added missing dependency on Linux rt library. |
| 2016-01-19 | 5.0.21 | ionCube24 Fix for possible incorrect behaviour when accessing a server from the ionCube24 interface when ionCube24 is fully activated. ionCube24 Fix for potential issue with large cache sizes. |
| 2016-01-16 | 5.0.20 |
Fix for potential issue with obfuscation of unqualified function names used within a namespace. PDF User Guide now included. ionCube24 Fix for issue with symlinks used within a trusted include path. ionCube24 Enhanced healing when PHP is unstable. ionCube24 php.ini option to block or allow scripts via stdin. ionCube24 Ability to protect only the domains configured within the ionCube24 interface rather than all domains. |
| 2015-10-19 | 5.0.19 | ionCube24 update to avoid potential unnecessary notification. |
| 2015-9-14 | 5.0.18 | Fix for possible false alert of a new file being blocked with ionCube24. |
| 2015-9-9 | 5.0.17 | Fix for issue with 64-bit Windows loaders. |
| 2015-8-27 | 5.0.16 | Fix for rare ionCube24 issue preventing interaction with the ionCube24 control panel on some systems. |
| 2015-8-19 | 5.0.15 |
Corrected handling for PHP 5.6 magic method, __debugInfo.Fix for memory corruption issue for thread-safe PHP when running unencoded files. Improvement in handling of empty arrays in PHP 5.6 with pre-5.6 encoded files. |
| 2015-7-29 | 5.0.14 | Fix for issue with previous release. |
| 2015-7-28 | 5.0.13 |
New ionCube24 php.ini option ic24.sec.trusted_include_paths for trusting dynamically created include files (see User Guide for details) plus enhancement for processing pre 5.6 encoded files on PHP 5.6.
|
| 2015-7-13 | 5.0.12 | Fix for problem caused by a large number of network aliases on a system. |
| 5.0.11 | No release. | |
| 2015-6-22 | 5.0.10 | Fix for an undefined symbol occurring with the PHP 5.3 Loaders. |
| 2015-6-19 | 5.0.9 | Fix for issue where if a reference variable was used as a non-referenced lexical variable in a closure then memory corruption would occur. |
| 2015-6-16 | 5.0.8 |
Fix for issue calling ioncube_server_data() or ioncube_write_file() from a function producing a dynamic key.Fix for problem sending ionCube24 notifications with some configurations. Internal changes related to future ionCube 24 features. |
| 2015-5-22 | 5.0.7 |
Workaround for an issue that prevented the Loader starting when XCache is installed. Fix for possible crash if a corrupt license is processed. |
| 2015-5-18 | 5.0.6 | Fix for ionCube24 notifications not being delivered with PHP 5.6 (Linux only). |
| 2015-5-15 | 5.0.5 |
Fix for failure in Windows 64 bit Loader. Fix for Windows Loader not recognising PHP 5.6 encoded files from Encoder 9.0. |
| 2015-5-8 | 5.0.4 | Fix for potentially excessive memory usage. Updating recommended. |
| 2015-5-4 | 5.0.3 (Linux) | ionCube24 Trustpoint is now enabled by default and set to the current time when first initialising ionCube 24 on a server. |
| 2015-5-2 | 5.0.2 | minor update in version 9 support. |
| 5.0.1 | No release. | |
| 2015-4-27 | 5.0.0 | support for running files produced by the ionCube version 9 PHP Encoder. |
IBM Power Systems
The archives include ionCube Loaders for PHP 5.6 and PHP 7.0 only.
| OS/Platform | Packages | Version | Release Date | |
|---|---|---|---|---|
| Linux ppc64el | tar.gz | zip | 6.0.9 | 2017-03-13 |
Legacy Loader Packages
Please note: The following packages are no longer being maintained are provided for legacy use.
| OS/Platform | Packages | Version | Release Date | |
|---|---|---|---|---|
| Windows VC6 (32 bits) | tar.gz | zip | 4.0.7 | 2011-2-21 |
| Windows VC6 (Non-TS) (32 bits) | tar.gz | zip | 4.0.7 | 2011-2-21 |
| FreeBSD 4 (32 bits) | tar.gz | zip | 4.4.4 | 2013-10-15 |
| Solaris (sparc 32 bits) | tar.gz | zip | 4.0.10 | 2011-8-16 |