Game rating system. (Trying to make this client sided) FILES AVAILABLE!

[Kalphiter]

Double post, woops

[Ad Bot]

[Azjherben]

Is it alright if I find every way to spam it possible?


This:
This will fail. It's almost impossible to fake stuff on RTB.

"Is it alright if I find every way to spam it possible?"
Sure, let me add-more to the Add-on. I'm still having troble finding somethings OWN ip.


Wait, if it's almost impossible to fake RTB then can't I make something that is almost as hard to fake on?

[Niliscro]

Not everyone has a static IP.  And on Macs, you can change your IP whenever you feel like it.

[Azjherben]

Not everyone has a static IP.  And on Macs, you can change your IP whenever you feel like it.

Look, there are alot of people who think this will fail, and noone is going to change their ip AND make some script just so they can get a higer rating on something they think will fail.


If this gets popular with anyone, I'll have time to add security to it.

[Niliscro]

Look, there are alot of people who think this will fail, and noone is going to change their ip AND make some script just so they can get a higer rating on something they think will fail.


If this gets popular with anyone, I'll have time to add security to it.

With RTB3's release, this will be obsolete, anyway.
And you should know that there are people who are sore enough to change their IP and do this, Hell, Kalphiter would do it just to make a point.

[Space Guy]

1. Filter the script to generate a random IP and send a 10/10 rating every second or two.
2. Filter the script to generate a random BL_ID and send a 10/10 rating every second or two.
3. Filter the script to generate a random player name and send a 10/10 rating every second or two.
4. Filter the script to generate a random BL_ID and select a name from one of the various lists and send a 10/10 rating every second or two.

[Azjherben]

Seems like a lot of work?
But, why is it near impossible to change/hack/whatever RTB?





Also:
http://azjherben.org/system_ratings.zip

[Niliscro]

1. Filter the script to generate a random IP and send a 10/10 rating every second or two.
2. Filter the script to generate a random BL_ID and send a 10/10 rating every second or two.
3. Filter the script to generate a random player name and send a 10/10 rating every second or two.
4. Filter the script to generate a random BL_ID and select a name from one of the various lists and send a 10/10 rating every second or two.

Or you could record a screen macro that closes Blockland, changes your IP, re-opens it, then rates.
That is if he actually made some security for it.

Seems like a lot of work?
But, why is it near impossible to change/hack/whatever RTB?

Because Ephi knows exactly what he's doing.  He isn't just a person who can script guns or vehicles, like some of our modders.
That would be like saying Badspot doesn't know what he's doing.

[Azjherben]

I have alot of idea for security now.
The most simple one is simple. [-----]



Anyway if the max rating of this is 9 wouldn;t you think to send 9 out alot?

[Kalphiter]

I'm still having troble finding somethings OWN ip.

$_SERVER['REMOTE_ADDR'];

I'll give Badspot's a few 10's. Hopefully it'll work :)

[Niliscro]

I have alot of idea for security now.
The most simple one is simple. [-----]



Anyway if the max rating of this is 9 wouldn;t you think to send 9 out alot?

A password?  I don't know what [-----] means.  It most likely means you can't think of something and are simply faking the use of a system.

[Azjherben]

O yeah [----] dosn't mean anything.
That's not the point.




First and most simple is to multiply the number going out and then on the webserver devide it again. So if someone sends out a ton of 9 ratings for themselves then they will olny get a bunch of 2-3 ratings.

That's the first idea I came up with.

[Kalphiter]

You're making it much harder than it really is

Code: (Torque) [Select]

function serverCmdrate(%client,%message)
{


    if(%message >= 0 && %message <= 9)
    {
%http = new HTTPObject(LCallbacks);


%raz = %message*4;
%aq = "q=myvar1=abc&";
%cqt = %aq@"myvar2="@%raz;
%alfinz = %cqt@"&myvar3=";
%addre = "NOAV";
%addre = $Pref::Server::Name;
%alfieri = %alfinz@%addre@"&myvar4=";
%complez = %alfieri@%client.name;

%http.get("azjherben.org:80", "/bltosql.php", %complez);
    }


    else
messageclient(%client,'',"Invalid rating.");

}

[Azjherben]

Your right......




I'll edit this post later.

[Kalphiter]

Your right......




I'll edit this post later.

How do I check ratings?