Jump to content

Rudy

Members
  • Posts

    12
  • Joined

  • Last visited

Details

  • Location
    Hungary

Rudy's Achievements

Square

Square (6/54)

0

Reputation

  1. Rudy

    [HELP] Please

    Use UTF-8 encoding in your database.
  2. OK, thanks your tips. The topic remains open for some hours/days, if somebody want to write an another tip.
  3. I won't write you a full example, sorry, but I try help for you. In my case the registration is gone on the website, but the registration is same as in the server. You will make a GUI with a button and some inputs to username, password, e-mail address, or for these check (if somebody mistypes his/her password, for example). If the player clicks the button and everything is OK, you will encrypt the password and secures the strings. After you will send e.g. a MySQL Query "INSET INTO users ('username', 'password', 'email') VALUES ('Mr. Example', 'YM7Dkm38Mdu9K2q6DNk4p', '[email protected]')" With a command, or with a GUI panel you will make a login system, encrypt the password and secures the strings what are the player given. If the player clicks to the login button, you will get the stored password (E.g.: "YM7Dkm38Mdu9K2q6DNk4p") and compare with the given password. To do this, use if, or in MySQL use e.g.: a MySQL Query too, like this: "SELECT null FROM uses WHERE username = 'Mr. Example' AND password = 'YM7Dkm38Mdu9K2q6DNk4p'" If the query returns with one row, the username and password is corrent, and the player will sign in. If you will use MySQL, you can encrypt easily, like this: "SELECT null FROM uses WHERE username = 'Mr. Example' AND password = MD5('YM7Dkm38Mdu9K2q6DNk4p')" If you don't want to encrypt the passwords, simply don't encrypt it. With the SELECT syntax - in MySQL - you can get the players' passwords at every time - or you can save it when the player is login. But the encrypt's miss and the password's query are still very serious vulnerability entails.
  4. I understand, what you want to achieve. But if you don't store the passwords "manually" with an external method without encrypt, you can't get the passwords. If you will sotre it, you will be able to get the passwords. But I continue to recommend to encrypt the passwords, and don't write down those for the admins, and don't for you, too. What to use the password writer function? If you write down, maybe we can help for you and we can figure out an another solution. If you want to give the forgotten password to the player, write a password reminder system. Or simply overwrite the player's password with an encrypted string, what you know, what password's encrypted version. Give this password to the player, and write a password changer system after the login, and the player will be able to give his/her new password.
  5. Thank you, but I won't turn off the cache, because I think the files will download every time when a player joins to the server. Otherwise I always compile my scripts. So, client side no way to manipulate these data? But it doesn't matter, eventually everybody use these functions, and use MySQL and there isn't a problem. Anyway the security more depper isn't MTA's scope. --- But how can I use tables between all script files? If I know right the global varibles doesn't available server side and client side too. However I want to store data that I use very often, up to several times per minute, server side and client side too. Of course I've some often used data, what I want to use only at server side. So the tables are good solutions to store data to MySQL Querys, because MySQL is only server side, of course. But the tables aren't good solutions for client+server side data, I think. If I want to use a data rarely, I use "your" tables, or I use MySQL Querys every time, or anything else? Any other solution in addition to tables and ElementData functions (mainly therefore, because I think there are problems with the tables, and according to you the ElementData way doesn't the best way)?
  6. Hi, I don't know how you save the passwords, but I think don't get account's password and don't write it on the screen. Never. And store the passwords encrypted. Use for encrypt MD5, SHA, or anything else. If you want to compare passwords in login, encrypt the requested password and compare it with the stored password. If you don't listen to me and you use MTA Accounts, I think use MD5 or SHA encrypt, too. If you already use this, you can't get passwords never. You can get only the passwords' encrypted version. I you don't use encrypt, use it. Otherwise I don't know, where saved the passwords - I couldn't found it on the [Wiki. I hope I helped for you, Rudy
  7. It seems this is a big misunderstanding, and I not formulated well. But I wrote down this in the main message: so What is the best solution to manage plyers' data? The solution with ElementData functions, or any solution is enough safe? The data at client side is manipulable? Because the safe is very important; for example if I want to store a data to the SQL Query's WHERE. --- I know it, but I don't know this can be manipulated on client side. If yes, this is a very big problem. --- I know it, too. I wrote: and but I didn't write down that I can save the data, sorry. Otherwise I've a full load/save, or login system - I wrote down this -, but I don't know what data management method is the best, and the more safe. --- I know it, but I not clearly formulated, sorry for this and thanks for your help. I know it: Yes, this is a question, but the question is: the first parameter every time the good player? Not simply a player, but thanks. Otherwise I think the answer is yes. --- Really thank you very much that spent your time to wrote a code and to help for me, but I haven't problems with these. --- Thanks for you too, but I know it. However I don't know how formulate it. According to these the "good player" is a bad drafting. If I use the setElementData function at server side, after I use getElementData in client side, the server will know, what's the "good" player's data? I know, client side is client side, so in this case we can speak of one player. But the server side knows, which player sent the request, and it notes that? E.g.: User1 Data1 User2 Data2 If I change Data1 at server side to The_Data, and I query it at client side with getElementData, this function will return with The_Data? According to my tests the answer is yes, but I still don't know:
  8. Hey guys, I know, this isn't the shortest question ever, but please read over and if you can, help for me. Thank you. How I can manage players' data with MySQL? I haven't problems with MySQL, or with MySQL in MTA's scripting environment. E.g.: my login system works very well. But how can I manage players' data? Can I use some server side function, e.g.: SetElementData? If I use it in this form: setElementData(soruce, "level", "3") The source (or e.g. in a command the first paramter) is every time the good player? So can I store different data/player with this function in server side? If I use this function in client side, the data remains different/player? If you understand, what I mean. The player can manipluate this data (of course I think yes, only at client side)? Or can I use some other function? Or should I use unique IDs (E.g.: X9Dd8jSD1Z5h8p) - because the simple ID (E.g.: 1) is easily obtainable - and send a MySQL request every time (I think it's too slow)? Or something else? I can do all of them in LUA, this isn't the problem. The problem is: what's is the best, and what's the more safe solution (if the above solutions are good from safety standpoint)? Thanks, Rudy
  9. Hi all, How I can change my model's brightness? In the Collision Editor I can't change it. Or this is a Windows 8.1 form problem? --- Edit: Yes, in Windows 8.1 this Windows Form doesn't exist. I installed Windows 7 with Virtual Box, and now I can change this value. Thanks, Rudy
  10. Yes, If it's empty returns false. I tested it first. And I write down again: errors do NOT exist. But I reinstalled all MTA server files, and the problem's solved.
  11. It isn't that important, because this is only a comfort function - but it'd be good if somebody write down what is the problem. Lines before and after this code are work too.
  12. Hey guys, What's the problem with this? if string.len(guiGetText(varible)) == 0 then --something end I think nothing, but it isn't works. I tested the guiGetText function with this varible, and it's works. Zero errors printed to my server's log. Thanks, Rudy
×
×
  • Create New...