Databases
StackOverflow2013
Postsdbo
POSafest way to update game score from client to server database? Javascript
 

Note that there are some explanatory texts on larger screens.

plurals
  1. POSafest way to update game score from client to server database? Javascript
    primarykey
    data
    text
    <p>So I have this game that is completely run on the client. No server interaction what so ever apart from downloading the initial scripts to play the game. Anyway at the end of the game I would like for the client to send me back the scores which should be updated in the server database. Now I have come to accept the fact that there is no way on earth I can hide this from a hacker and send the scores unaltered. But I would like to know till what level can I modify the whole process that it virtually becomes pretty infeasible for the hacker manipulate the data which is being sent. For sure I would not like the score to be sent as plain text from client machine and I don't want my server to perform complex decryption algorithm. What is the best way hence to achieve considerable amount of security that every tom dick and harry doesn't hack the scores... I hope someone could provide a nice little way that I could work on... :) Thanks</p> <p>So my ideal result should be -> have trusted result from a calculation (of score) made by an untrusted party (the player)!</p> <p>-Edit-</p> <p>Someone told me something about hiding the data in a picture get request. Like, I am implementing this game on canvas (html5). So he asked me at the end of the game to fetch a game over image from my server, and they request should contain the hashed score. I did not exactly understand the complete process but if you could explain it, would be really glad! :)</p> <blockquote> <p>coda^ so you can mask the requests nicely</p> <p>shouvik how do I do it!?</p> <p>coda^ you can compose the checksum you want to submit. like 12312312a12313a232 is your md5 which contains the score. bring in an asset into the canvas like</p> <p>coda^ server.com/images/md5_hash_of_score/congratulations.png</p> <p>coda^ which you can rewrite server side via htaccess</p> </blockquote>
    singulars
    1. PO
      singulars
      1. PTAnswer
    1. This table or related slice is empty.
    1. PTQuestion
    1. USypercubeᵀᴹ
    1. USShouvik
    plurals
    1. PL
      singulars
      1. LTLinked
    1. PL
      singulars
      1. LTLinked
    1. This table or related slice is empty.
    1. PO
      singulars
      1. PTAnswer
    2. PO
      singulars
      1. PTAnswer
    3. PO
      singulars
      1. PTAnswer
    1. VO
      singulars
      1. POSafest way to update game score from client to server database? Javascript
      1. This table or related slice is empty.
      1. VTUpMod
    2. VO
      singulars
      1. POSafest way to update game score from client to server database? Javascript
      1. This table or related slice is empty.
      1. VTUpMod
    3. VO
      singulars
      1. POSafest way to update game score from client to server database? Javascript
      1. USHaim Evgi
      1. VTFavorite
    1. COThis is more or less the same problem as http://stackoverflow.com/questions/1901352/preventing-cheating-in-online-chess-games
      singulars
      1. POSafest way to update game score from client to server database? Javascript
      1. USQuentin
    2. CO@David, no this is pretty different! I have no problems with him trying to screw with my game as he plays it alone.. So let him do whatever the hell he would like to. If he messed with the scoring, I have an adaptive algo on my server which checks if the score can be reasonably achieved, if not USER IS BANNED! But I would not like it to be to easy, like just modding the ajax post...
      singulars
      1. POSafest way to update game score from client to server database? Javascript
      1. USShouvik
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload