Raised This Month: $9 Target: $400
 2% 

Security


Post New Thread Reply   
 
Thread Tools Display Modes
Author Message
spiider
AlliedModders Donor
Join Date: Jan 2010
Old 02-16-2010 , 12:09   Security
Reply With Quote #1

I'm developing a system in amxx, and i use mysql and if someone decompile amxx file can see my password, and i want know how i can encrypt the password.
spiider is offline
Sylwester
Veteran Member
Join Date: Oct 2006
Location: Poland
Old 02-16-2010 , 12:17   Re: Security
Reply With Quote #2

Don't hardcode password for mysql in plugin. Retrieve it from cvar (the same goes for host, username, database name) and in this case you just need to make sure that noone can see your server config files.

Also if you give someone your plugin then you must provide source code.
__________________
Impossible is Nothing
Sylwester is offline
spiider
AlliedModders Donor
Join Date: Jan 2010
Old 02-16-2010 , 12:22   Re: Security
Reply With Quote #3

I want encrypt because some can hack game server host and try decompile.
spiider is offline
Sylwester
Veteran Member
Join Date: Oct 2006
Location: Poland
Old 02-16-2010 , 12:31   Re: Security
Reply With Quote #4

If your game server host can be hacked, then it suck. Find better one.

If you want to make sure that nobody will be able to retrieve your password from server even if they get access to files, then you will probably need to make your own module...
__________________
Impossible is Nothing
Sylwester is offline
spiider
AlliedModders Donor
Join Date: Jan 2010
Old 02-16-2010 , 12:35   Re: Security
Reply With Quote #5

well i'm go try make my own module .
The big problem is my plugin will be used by other persons who want use my gather system.
I'm think in make plugin with http requests, but if have alot of servers connected at same time will be have others problems.

Last edited by spiider; 02-16-2010 at 12:37. Reason: add information
spiider is offline
spiider
AlliedModders Donor
Join Date: Jan 2010
Old 02-16-2010 , 14:58   Re: Security
Reply With Quote #6

i have check source code of mysql module. And i'm try find where i need put the info of connection for later recompile.
spiider is offline
Exolent[jNr]
Veteran Member
Join Date: Feb 2007
Location: Tennessee
Old 02-16-2010 , 17:05   Re: Security
Reply With Quote #7

Use some method to encrypt your password.
Then use that in the plugin.
On plugin start, you can decrypt your password with a reverse method of what you used to encrypt it.
__________________
No private work or selling mods.
Quote:
Originally Posted by xPaw View Post
I love you exolent!
Exolent[jNr] is offline
Sylwester
Veteran Member
Join Date: Oct 2006
Location: Poland
Old 02-16-2010 , 17:18   Re: Security
Reply With Quote #8

How is this supposed to help if he is worried about decompiling his plugin? If someone can decompile it then no matter what kind of encrypt method you use, that someone will be able to retrieve orginal password.

I would suggest something else: Don't store password on your server, but retrieve it from website or database that answers only to requests sent from your game server ip...
__________________
Impossible is Nothing
Sylwester is offline
Seta00
The Seta00 user has crashed.
Join Date: Jan 2010
Location: Berlin
Old 02-16-2010 , 18:01   Re: Security
Reply With Quote #9

Quote:
Originally Posted by Sylwester View Post
If your game server host can be hacked, then it suck. Find better one.

If you want to make sure that nobody will be able to retrieve your password from server even if they get access to files, then you will probably need to make your own module...
And you can always decompile the module.
Seta00 is offline
Sylwester
Veteran Member
Join Date: Oct 2006
Location: Poland
Old 02-16-2010 , 18:10   Re: Security
Reply With Quote #10

Wouldn't that be harder than decompiling .amxx?
__________________
Impossible is Nothing
Sylwester is offline
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 22:46.


Powered by vBulletin®
Copyright ©2000 - 2021, vBulletin Solutions, Inc.
Theme made by Freecode