I have a client that saw an application that I developed and wanted the software for their business. The application is written in PHP and MySQL.
They said that their internet connection is too unstable to reliably have it hosted normally and asked if we could have it hosted in their office.
I decided that I will only sell them the functionality for use and not for reselling, modifying or redistribution. I also intend on having them sign contract not to resell, modify or redistribute.
To make sure that they cannot copy the code I encrypted the application folder with EFS and set up the Apache to log in as the only admin user. This PC will be hosting the application in their office and they will not get any credentials to log into that PC.
How secure is this setup so that my client cannot copy my php code?
Is there any other vulnerabilities I should be aware of and fix if possible?