[REQ]Clan Tag Protection Script

[AeroXbird]

Hey Guys, its me again Ive got another question

can somebody of you guys please make a Tag Protection Script To Protect My Clan Tag From Being used by Somebody who isnt member of my clan.

regardings, Fatalitry

[robhol]

This is very easy. Check if a user's nick contains the tag, if it's your tag, check if HE's in a list of clan members. If he's not, kick him or whatever. Would take 5 minutes to mash up.

[darkdreamingdan]

How do you propose checking if a person is in fact a member of your clan?

[50p]

How do you propose checking if a person is in fact a member of your clan?

Store them in an XML file(?)

[Ace_Gambit]

A "clean" way of doing it is to create a "clan" group in your ACL and assign clan member accounts to this group. You can then get all player objects and check if the signed-in player is indeed a member. Pattern matching can be used as an extra security routine to see if the clan tag exists in the nickname.

[AeroXbird]

Well Thats the problem I AM RUBBISH WITH SCRIPTING LUA

[darkdreamingdan]

How do you propose checking if a person is in fact a member of your clan?

Store them in an XML file(?)

So what, you have a list of valid names that anyone can use and get Clantag access? I think not

[churchill]

How do you propose checking if a person is in fact a member of your clan?

Store them in an XML file(?)

So what, you have a list of valid names that anyone can use and get Clantag access? I think not

I'm a n00b here, so excuse me if I've got this wrong - I've not actually started scripting yet but given what I'm reading in the wiki, I would assume that you would make use of Account functions on the server to securely tell whether a user belongs to a clan?

Obviously you would need to verify that they belong to the clan first, e.g. the user would register on the server using addAccount etc, and then they apply to become part of a clan. It would make sense that you then need an Admin or "1st officer" of the clan to accept them into it, as you would expect in any clan/gang. This clan membership could then be stored against the User's Account, using setAccountData(userAccount,"clanMembership") or whatever you want your key to be called.

When the user logs in, instead of using their nick to verify them, it would actually require the user to login (with username/password), at which point you can then check getAccountData(userAccounts, "clanMembership") to return whether the user belongs to the clan you want them to be part of. Once you know if they belong to the clan or not, kick them if their nickname gives the impression that they are, by using the pattern matching that was mentioned earlier in the thread.

[Twig]

You could check their user name and serial against a list of authorised members data, also have an optional password in case their serial changes.

That would be reasonably robust imo.

edit/ you'd probably also want an addClanMember function to record any new members to the xml file (or whatever storage method you used)