Raised This Month: $13 Target: $400
 3% 

[ANY] SteamID protect with MySQL , md5() and Web-Interface


Post New Thread Reply   
 
Thread Tools Display Modes
Author
igodsewer
BANNED
Join Date: Jul 2012
Location: Moscow
Plugin ID:
3122
Plugin Version:
Plugin Category:
General Purpose
Plugin Game:
Any
Plugin Dependencies:
    Servers with this Plugin:
     
    Plugin Description:
    Unapprover:
    Reason for Unapproving:
    Author Banned.
    Old 07-29-2012 , 15:12   [ANY] SteamID protect with MySQL , md5() and Web-Interface
    Reply With Quote #1

    SteamID Protect System
    This plugin really deserves to be called "System"

    This plugin was rewritten for my v34 server and I decided to release it for public access.
    I will provide access to "sp" file only for respectable persons, such as good developers, moderators, etc due to security reasons.

    Features:
    • Securing SteamID with password
    • Web interface with password recovery and registration options
    • MD5 hashing, since all confedential information should not be stored "as is"
    • MySQL injection security. Original version doesn't have this feature
    • Easy configuration file in Web-interface
    • Ability to make you own translation files

    Using tutorial:
    1. Open up your chat and write /secure "password" "secretphrase"
    2. Open up your console and type xbox_autothrottle "password" into it. If you are not sure that config.cfg was rewritten with new settings - add this string manually.
    3. Enjoy!

    Cvars (actually, there's only one Cvar ):
    Code:
    // Link to web interface
    // -
    // Default: "http://yoursite.net/"
    sm_sprotect_site "http://yoursite.net/"
    Web Demo could be found here (it would be in English for couple days)

    Known bugs:
    Web: Showing fake error on register action
    Game: none

    To-Do:
    • Make admin panel for web interface (coming soon)
    • Make kind of tabulation in index.php source for better reading
    • Integrate translations into server plugin
    • Prevent web script execution on page refresh (need some help here, any ideas?)
    • Go into release version

    Special thanks:
    Shamilik for his help with md5 and mysql security in server-side script. He's awesome coder, ya know!

    Last edited by psychonic; 07-29-2012 at 15:30.
    igodsewer is offline
    Jim E. Rustler
    BANNED
    Join Date: Jul 2012
    Old 07-29-2012 , 15:20   Re: [ANY] SteamID protect with MySQL , md5() and Web-Interface
    Reply With Quote #2

    Quote:
    Originally Posted by igodsewer View Post
    I DON'T GIVE ANY SHIT IF SOMETHING GOES WRONG!
    Nice.

    >Something to do with passwords
    >Author is Russian
    >Author not providing sourcecode

    Seems legit.

    Last edited by Jim E. Rustler; 07-29-2012 at 15:25.
    Jim E. Rustler is offline
    thetwistedpanda
    Good Little Panda
    Join Date: Sep 2008
    Old 07-29-2012 , 15:24   Re: [ANY] SteamID protect with MySQL , md5() and Web-Interface
    Reply With Quote #3

    http://pastebin.com/vGn1cBwb is a decompile of the binary he provided without source.
    __________________

    Last edited by thetwistedpanda; 07-29-2012 at 15:25.
    thetwistedpanda is offline
    nelioneil
    AlliedModders Donor
    Join Date: Sep 2005
    Old 07-29-2012 , 19:04   Re: [ANY] SteamID protect with MySQL , md5() and Web-Interface
    Reply With Quote #4

    Plus supporting no-steam servers, another suspect thing to add to the list
    nelioneil is offline
    Reply


    Thread Tools
    Display Modes

    Posting Rules
    You may not post new threads
    You may not post replies
    You may not post attachments
    You may not edit your posts

    BB code is On
    Smilies are On
    [IMG] code is On
    HTML code is Off

    Forum Jump


    All times are GMT -4. The time now is 19:03.


    Powered by vBulletin®
    Copyright ©2000 - 2020, vBulletin Solutions, Inc.
    Theme made by Freecode