Scratch

Magnie wrote:

I would suggest using the $_GET with PHP and the get data from URL block in Panther and to validate each request on the server. Doing this will allow you to release the source-code and you won't have to worry as much about hacking.

I barely know any PHP. If you could help me with this, it would really help!

I think I'll change the name though.

slinger wrote:

Hey sounds awesome, if only I knew python and php I could help out a little ;-;

Yeah. I can do the scratch part, but I need someone to do the web part.

SeptimusHeap wrote:

I'm starting to take Servine's great idea to store data online for his client, Kabam. But I didn't like how unsecure and unprofessional looking his was. So I set out to make CloudGaming.

First, I'll need a safe, effective way to store data online. I was thinking of using JD1's server code for scratchlive.xtreemhost.com on a different site, or encoding it. What should I do, and how?

The program will hopefully be released also encoded as a .exe file, so that nobody can 'hack' the encryption.

Ok, I join. Can i be leader? 

Anyway, I've devised a MASTER plan.

We will encode it.

Not sure how thats master, but hey?

SeptimusHeap wrote:

Servine wrote:

SeptimusHeap wrote:

I'm starting to take Servine's great idea to store data online for his client, Kabam. But I didn't like how unsecure and unprofessional looking his was. So I set out to make CloudGaming.

First, I'll need a safe, effective way to store data online. I was thinking of using JD1's server code for scratchlive.xtreemhost.com on a different site, or encoding it. What should I do, and how?

The program will hopefully be released also encoded as a .exe file, so that nobody can 'hack' the encryption.

Ok, I join. Can i be leader? 

Anyway, I've devised a MASTER plan.

We will encode it.

Not sure how thats master, but hey?

What will you do?

I sort of want to be in charge of how stuff looks (graphics, interface) and some advanced coding.

Co-owner?

I know PHP too, I may advise a little.

How do you want to make this different to JD1's? He does exactly the same thing. Uses the Panther URL blocks to send a $_GET request to a PHP page which then takes the inputs to create/delete/set variables. It's unsecure because all his variables can be viewed by the general public but if that were hidden you would instantly boost security.

Currently, with his system anyone with the variable name can read and write to it. This causes problems if two people want the variable "score" so I suggested he try to get people to add a unique code to the prefix of the variable like so: "sparks123_score". That way only I would be using that variable, the chance of overwriting someone becomes very slim. If you gave each copy of the program it's own unique, uneditable ID then that would work nicely, though you would then have the problem that projects joining together wouldn't be able to share variables which is the whole aim. You can't share your code with someone else without them then being able to use that to easily change your variables at will since they have your code and all the variables names are in their project too.

What you could possibly do is allow users to register their username to a coded variable prefix. I enter my Scratch username and password and the name of the project I'm working on, then your system gives me a prefix for my project variables like "sparks442664". Voila, all my projects can now technically connect to that variable because it is not unique to one copy of the project without the user ever seeing it.

Does that make sense?

You will need a webhost, yes. Don't use weebly, you need to make sure your host supports PHP and offers a MySQL database 

I know a little C# which could be used to make an EXE application but how to securely link this to a Panther project I do not know.

Last edited by sparks (2012-01-13 06:50:45)

Ask how Servine did his, because according to him it's secure.

Servine wrote:

veggieman001 wrote:

Ask how Servine did his, because according to him it's secure.

Well, I used the encrypter ZeroLuck gave me. To be honest, the only thing you have to do to encrypt is to make sure the file cannot be accessed. How? Ask ZeroLuck

The problem with that is that in order for the program to run, it must be able to be accessed, therefore making it impossible to prevent hackers.

A solution to a lot of these issues is to store passwords as hashes and make the server verify highscores and other public data. Hashing passwords makes it much more difficult to determine another user's password, and ensures that passwords are never actually sent to the server. Making the server verify public data ensures that hackers can't set the values unreasonably.

SeptimusHeap wrote:

How? And also, how does hashing work.

http://en.wikipedia.org/wiki/Cryptograp … h_function

Last edited by nXIII (2012-01-13 19:06:42)

OK. Made a salt generator. Now how do you hash?

SeptimusHeap wrote:

Also trying to think of a way so only the client can submit data, not anyone else. Any ideas?

This is impossible!
I think you have to read something about networking before doing something like that game...