Scratch

Zeusking19 wrote:

Great idea. Remember this is not only to the ST`s ability, but also what squeak can do.

It will be in flash in 2.0, so it could happen.

Yes but even if they kept it in java due to some un-forseen problem they could program a small python code to manipulate the java applet and connect it up to an sql server.

Thanks for your feedback    O O (meant to be a monkey)
                                            . .
                                            _

please visit my new comment on page 4

Last edited by P110 (2012-03-20 12:37:04)

scimonster wrote:

Try simplifying it by saying that a database is like a list, but it's online somewhere. 
The problem is that, people might put real passwords and information in, and not know it's being added to a database. Also, how would you make sure you're not taking the wrong data?
If it could be implemented with no security loopholes, that would be great, but otherwise, I don't think so.

There are free services that will host a SECURE database that way being secure and people could enter real passwords.


You could have the database used for a sign-up script, something like this.

when gf clicked
ask [please enter username]
set[username v]to(answer)

please visit my new comment on page 4

Last edited by P110 (2012-03-20 12:36:25)

scimonster wrote:

P110 wrote:

scimonster wrote:

Try simplifying it by saying that a database is like a list, but it's online somewhere. 
The problem is that, people might put real passwords and information in, and not know it's being added to a database. Also, how would you make sure you're not taking the wrong data?
If it could be implemented with no security loopholes, that would be great, but otherwise, I don't think so.

There are free services that will host a SECURE database that way being secure and people could enter real passwords.


You could have the database used for a sign-up script, something like this.

when gf clicked
ask [please enter username]
set[username v]to(answer)

then repeat it for a password it would work therefor being no security loopholes

I mean, how would you get the info out of the database? Then, people could take someone else's data.

Oh, sorry,

It would just simply check if the data existed, and I would bypass the scratch website so it was only on my website and not here, so the project was not downloadable.

please visit my new comment on page 4

Last edited by P110 (2012-03-20 12:36:02)

I don't think so. It would be easy to find out where the DB was and get the info out of it. Not that I would, but I probably could. (I HAVE NOT HACKED ANYTHING REAL. JUST HACKTHISSITE CHALLENGES.)

And if I could, others could too.
So you'd need good security and very good encryption.

I'm just raising a point- it probably would not be very secure, as anyone with programming knowledge can just go into the source code and find where the information was going. Also, if you're using PHP, PHP is prone to injection if you don't remember to safeguard everything.

So, if you want to do this, you're probably going to have to explain how you are going to make it secure.

However, this could be useful, especially for making OSes, savegames, etc.

I agree with the idea. However, as people have said on this topic, you'd need to check the database for data.

I think we should have "inputs" like items of an online, multiplayer list.
I propose these blocks for the idea: (you must [use database] to connect)
[use database]
[add input "text" to database]
[replace input (1) of database with "text"]
[remove input (1) of database]
(input (1) of database)
<"text" is in database?>

P110 wrote:

After all of your comments, I have revised how it would work, firstly it would have a password to access the data and it would be hidden in the download of the project, and the database name would also be hidden, as for people looking for it outside of scratch it would be protected there aswell, as most databases are.

But how would you hide the database url? Assuming your scratch project parsed it into a .txt file, it would still probably have a block like
[save (database) at (URL]

So anyone could theoretically open the project, copy the url, download the .txt file, and read anyone's data.  Which isn't necessarily *bad*, as long as no one uploads personal info or their actual passwords.  Maybe look into the scripting for Magnie's chat?

Encrypt the data using a password/key that is unique to each computer.

P110 wrote:

REVISED, again

Ok here is how it would work, the database url, username and password would be hidden when project downloaded.

The scratch project file can be easily hidden by hosting it on your own server after importing the other file necessary.

Any more problems here? Add them below! 

It would be somewhat complicated, but I guess that could work.  I would just make a simple command interpreter that carries out certain encryption methods, then have the project download an encryption key from that. Unless scratch team made a special block specifically for use only by the original project creator...
Has anyone submitted this thread to the scratch team?
These are some great ideas; they should definitely see them.

Last edited by prototype47 (2012-02-04 23:41:39)

Ok ST have been notified of it's existence, ao hopefully it will be in scratch 2.0 but no promises, I will give there answer here soon.

please visit my new comment on page 4

Last edited by P110 (2012-03-20 12:38:57)

How would you know if I used a block that said "set cloud high score to 999999999999"?

sdg1 wrote:

Hi P110 and others.

[short version] We are working on this [/short version] 

[long version]
We have decided to split the problem into two different parts. One part deals with storing data online. The other part deals with data-sets, and operations on data-sets like filtering/searching.

For the first part, we are currently testing an idea where we have special variables called cloud variables. When you set a value of cloud variables in the online player, even if you leave the project, when you come back later, you'll get back the values you originally stored. So for storing high scores in a Scratch game, your code can look like:

if <(current score) > (☁ high score)>
  set [☁ high score v] to (current score)

With this code, once the [☁ high score] variable is set, the next person who accesses the project online will have to beat the high score set previously.

We are doing cloud lists too, where values set for lists will be stored online.


For more database-y stuff, we are still trying to finalize what the blocks would look like, but the idea is to allow for Scratch projects to connect to online data-sets, and do query/search. I'll post more information on this as we make more progress on this.

That sounds really awesome! I can't wait!

(sidenote: I thought you said 'tetchy' instead of 'techy' at first lol)

sdg1 wrote:

Hi P110 and others.

[short version] We are working on this [/short version] 

[long version]
We have decided to split the problem into two different parts. One part deals with storing data online. The other part deals with data-sets, and operations on data-sets like filtering/searching.

For the first part, we are currently testing an idea where we have special variables called cloud variables. When you set a value of cloud variables in the online player, even if you leave the project, when you come back later, you'll get back the values you originally stored. So for storing high scores in a Scratch game, your code can look like:

if <(current score) > (☁ high score)>
  set [☁ high score v] to (current score)

With this code, once the [☁ high score] variable is set, the next person who accesses the project online will have to beat the high score set previously.

We are doing cloud lists too, where values set for lists will be stored online.


For more database-y stuff, we are still trying to finalize what the blocks would look like, but the idea is to allow for Scratch projects to connect to online data-sets, and do query/search. I'll post more information on this as we make more progress on this.

I'm giggling inside. 
Not to push, but is Scratch 2.0 nearing anything like completion? If you can't say that's fine.