They can also remove encoded PHP (and includes) if we are talking about people who gets the source code.

So establish a license that prohibits modify some part of the code could be the solution (assuming that buddhi225 can not host the files, and therefore he can't control them directly).