Author Topic: Securing Your Server Without Master Server Authentication  (Read 1798 times)

Legacy_FunkySwerve

  • Hero Member
  • *****
  • Posts: 2325
  • Karma: +0/-0
Securing Your Server Without Master Server Authentication
« Reply #15 on: August 08, 2011, 05:01:32 pm »


               Thanks for spotting that. The _ was an addition from our version, to make the var easier to read. Ours has no divider.

Funky
               
               

               
            

Legacy_zunath

  • Full Member
  • ***
  • Posts: 152
  • Karma: +0/-0
Securing Your Server Without Master Server Authentication
« Reply #16 on: August 08, 2011, 06:27:22 pm »


               No prob. It works great with that fix '<img'>
               
               

               
            

Legacy_WebShaman

  • Hero Member
  • *****
  • Posts: 1390
  • Karma: +0/-0
Securing Your Server Without Master Server Authentication
« Reply #17 on: August 09, 2011, 02:14:53 pm »


               Sticky request sent!

A huge thank you to Mr. Priestly for the quick sticky!!!! '<img'>
               
               

               


                     Modifié par WebShaman, 09 août 2011 - 04:31 .
                     
                  


            

Legacy_mysticjester

  • Newbie
  • *
  • Posts: 10
  • Karma: +0/-0
Securing Your Server Without Master Server Authentication
« Reply #18 on: August 25, 2011, 06:33:58 am »


               nice work.  :-)
s.
               
               

               
            

Legacy_OldTimeRadio

  • Hero Member
  • *****
  • Posts: 2307
  • Karma: +0/-0
Securing Your Server Without Master Server Authentication
« Reply #19 on: September 06, 2011, 12:32:04 am »


               Nice!
               
               

               
            

Legacy_Alphamojo

  • Newbie
  • *
  • Posts: 37
  • Karma: +0/-0
Securing Your Server Without Master Server Authentication
« Reply #20 on: September 10, 2011, 10:27:14 am »


               Awesome as always Funky!
               
               

               
            

Legacy_BlackJello

  • Newbie
  • *
  • Posts: 2
  • Karma: +0/-0
Securing Your Server Without Master Server Authentication
« Reply #21 on: September 12, 2011, 12:59:09 am »


               Thank you so much for sharing your work, Funky. This was very easy to add to my module. I appreciate you sharing it with the community.
               
               

               
            

Legacy_dragonvain

  • Newbie
  • *
  • Posts: 7
  • Karma: +0/-0
Securing Your Server Without Master Server Authentication
« Reply #22 on: November 25, 2011, 06:47:27 pm »


               question   how do tell the  scripts to only take  one cd key  only
               
               

               
            

Legacy_Melkior_King

  • Full Member
  • ***
  • Posts: 234
  • Karma: +0/-0
Securing Your Server Without Master Server Authentication
« Reply #23 on: December 01, 2011, 01:24:48 pm »


               If I understand correctly, the above scripts automatically take only one CD key unless you deliberately allow players to add another CD key by providing them with an item to activate the script which "unlocks" the account again.
               
               

               
            

Legacy_ultima03

  • Newbie
  • *
  • Posts: 46
  • Karma: +0/-0
Securing Your Server Without Master Server Authentication
« Reply #24 on: January 04, 2012, 10:17:20 am »


               Non sql data storage is not reliable. (more like horrible)
               
               

               
            

Legacy_kalbaern

  • Hero Member
  • *****
  • Posts: 1531
  • Karma: +0/-0
Securing Your Server Without Master Server Authentication
« Reply #25 on: January 05, 2012, 05:01:49 pm »


               

ultima03 wrote...

Non sql data storage is not reliable. (more like horrible)


Perhaps you've failed to note that both SQL and Non-SQL options are available in the above posts.
               
               

               
            

Legacy_ultima03

  • Newbie
  • *
  • Posts: 46
  • Karma: +0/-0
Securing Your Server Without Master Server Authentication
« Reply #26 on: January 05, 2012, 05:19:06 pm »


               

kalbaern wrote...

ultima03 wrote...

Non sql data storage is not reliable. (more like horrible)


Perhaps you've failed to note that both SQL and Non-SQL options are available in the above posts.


In wich realm did I state that there is no other option than non-sql? 

anyway all funkyswerve work is always so messy and unreadable, unprofessional. Now he offers a natural bioware Database system wich is just idiotic knowing that database's ugly flaws will make his system  useless with a ratio of 100%. why no notice ? And, anyway, this is just a workaround that pretend that the first to log in is the legitimate owner, wich is stupid.
               
               

               


                     Modifié par ultima03, 05 janvier 2012 - 06:12 .
                     
                  


            

Legacy_kalbaern

  • Hero Member
  • *****
  • Posts: 1531
  • Karma: +0/-0
Securing Your Server Without Master Server Authentication
« Reply #27 on: January 06, 2012, 01:30:08 am »


               

ultima03 wrote...

kalbaern wrote...

ultima03 wrote...

Non sql data storage is not reliable. (more like horrible)


Perhaps you've failed to note that both SQL and Non-SQL options are available in the above posts.


In wich realm did I state that there is no other option than non-sql? 

anyway all funkyswerve work is always so messy and unreadable, unprofessional. Now he offers a natural bioware Database system wich is just idiotic knowing that database's ugly flaws will make his system  useless with a ratio of 100%. why no notice ? And, anyway, this is just a workaround that pretend that the first to log in is the legitimate owner, wich is stupid.


Claiming Funky's work is "always so messy and unreadable, unprofessional", can mean only one of two things. You're deliberately trolling against him or lack the knowledge to discern his scrips and henceforth resort to name calling to disguise you're own ignorance.

As for the Bioware DB soultion offered, that was an alternative only. There's many other alternatives available to PW Admins as well. If a PW has no other DBs in use and the Admin/Host lacks confidence in "learning something new", the Bioware DB will work just fine. Most of "Us" know one another and share such information freely. Admins of PWs also have access to private help through a forum set up elsewhere.

You're assertion that the Bioware option is useless and will fail further highlights your lack of knowledge. For most PWs, if the only thing they need a DB for is Player Vault protection, there's nothing wrong with using the Bioware DB. I personally know of 7 smaller PWs that have used it thusly for over a year now with no issues. So much for your own paranoid claims. I also know of 2 PWs that have used it for other uses related to character tracking, one for 8 years and the other 6 years now, with no issues ever arising. Granted, the Bioware DB is ineficient, but used sparringly, it works well. Since many PWs use NWNX2, SQL or a variant is most likely more commonly used. Especially if there are custom races/subraces, custom classes, custom spells, custom feats or skills, persistance, etc... in use.

Apparently you fail to also understand just what the "MS" did. It only prevented another player from joining an online game with a Login already in use elsewhere. It was not foolproof. It was easilly bypassed as well. Thus, it offered a false sense of security and actually enabled "griefers" to cause all sorts of mischief. Most large PWs recognized its limitations and took other measures long ago. Those few that didn't, did so shortly after the "MS" went down for good. The majority of PWs online today are far, far, far more secure than most were a few years ago.

With the MS down, its true, someone could use "your" login to play. They'd not be able to access most servers you play on however. Lacking your CD Keys, a server using any of the means posted here along with the many variants most of us use, the player trying to "emulate" your account would be booted, banned, PCs held immobile somewhere or whatever a Admin/Host desired as punishment or an outcome.

Your fears are unfounded and unmeritted.

As for awaiting a response from Bioware, they gave one long ago. They were making available what was needed for Atari to take over the responsibility. Its Atari's duty and not Bioware's to continue support for this game. Please go rail against them for their lack of dedication to the player base.
               
               

               
            

Legacy_ultima03

  • Newbie
  • *
  • Posts: 46
  • Karma: +0/-0
Securing Your Server Without Master Server Authentication
« Reply #28 on: January 06, 2012, 04:51:54 am »


               You're so wrong it's unbelievable. I could just quote myself again, after your post responding to it, because it remain true and  you don't seem to know what you're talking about.
               
               

               
            

Legacy_ultima03

  • Newbie
  • *
  • Posts: 46
  • Karma: +0/-0
Securing Your Server Without Master Server Authentication
« Reply #29 on: January 06, 2012, 05:39:29 am »


               Why natural bioware database is not reliable, and why no dev should offer a solution using it :

- Limited to 32 chars, brutally truncated if longer
- Var name must be unique throughout the entire database no matter if it is an int or a float, or a string... (if not, it will be simply crushed)
- Getter and Setter for CampaignLocation are absolutly not reliable, the database can get invalid if u change the area layout in the toolset  (!)
- Database grow big and fast because the data that you asked for deletion will not be deleted but simply flagged as deleted. uglier : If you try to modify an entry, instead of overriting it, it will make a new one and flag this one as deleted.
- One last : it's a slow database solution.

Why would funkyswerve or anyone serious provide a solution using this, especially concerning a Security problem ? he should just delete it and leave the one with mysql. Its just like the people from Avlis providing a craft system with
bioware db, and next to it a mysql version, the first one can be thrown
directly to the bin.

And nor players nor developper should have to worry about this problem at all.
               
               

               


                     Modifié par ultima03, 06 janvier 2012 - 11:25 .