• Midage : Gmod
    187 replies, posted
scrolling texture on a huge skybox model.
[QUOTE=Anthracite;16171865]scrolling texture on a huge skybox model.[/QUOTE] Thanks, I'll fiddle with it.
The new database server is done. Expect some news in a week or 2. :) What does the database server allows? -- * You can host servers for Midage : Gmod. * Guarantees LUA code is unchangeable. * Detects & Ban cheaters just like VAC does but with our game criteria (cutting trees too fast, got too many xp etc...) * Allows us to keep track of the game (How many servers, accounts...). * Provides better logs to our Game Masters (Admins / Moderators) * And a lot more :D
[QUOTE=JPiolho0;16238109]The new database server is done. Expect some news in a week or 2. :) What does the database server allows? -- * You can host servers for Midage : Gmod. * Guarantees LUA code is unchangeable. * Detects & Ban cheaters just like VAC does but with our game criteria (cutting trees too fast, got too many xp etc...) * Allows us to keep track of the game (How many servers, accounts...). * Provides better logs to our Game Masters (Admins / Moderators) * And a lot more :D[/QUOTE] Problem with answer/idea/code 3 If there was a glitch to get a overly large amount of exp and he did it on accident,Nice Guy (made up name) would be banned by the security system. ALSO,IDEA: Name the security system M.A.S.S (Mid-Age Security System)
So does this mean that people will be able to download the gamemode and install a server for it, and have it all run from one central server, sharing player accounts between servers? Sounds exploitable to me.
[QUOTE=thomasfn;16238241]So does this mean that people will be able to download the gamemode and install a server for it, and have it all run from one central server, sharing player accounts between servers? Sounds exploitable to me.[/QUOTE] The server will never have a direct access to the database. That's why theres a server in middle (this one), called Database Server. The database server also ensures that all lua code is the same as original. If the server has different lua code it will not be added to server list (used by redirection system) and all connections are blocked to the database server.
How does the database server tell if the code is the same as original or not?
[QUOTE=thomasfn;16239114]How does the database server tell if the code is the same as original or not?[/QUOTE] By exchanging some values (CRC, Last Modified, Size...) and if those match it's okay and allows server to continue connection to the database.
What if the server is in another country? How will the gamemode deal with a 300ms latency? What if someone hosts a shitload of 64 slot servers and fills it all with bots, does bot_mimic and then just goes nuts? How will your server be able to cope with all that? How exactly are you going to prevent people from modifying the code? CRC checks? A module? I seriously doubt it is anything that an experienced coder can't fool first.. If the gamemode connects to a central server, the person get the MySQL deets, and they can do whatever we like.. This seems extremely exploitable.. I would recommend sending all data through a PHP parser or something like that, then you don't need to give away the MySQL deets. Instead of modifying data directly, tell the server what the player did and then get the real server to decide what to do with the database. That will increase the load on your servers, but reduce the risk of cheaters. It sounds extremely risky! But good luck anyway.. (I can't seriously believe you are doing this...) [editline]11:00PM[/editline] [QUOTE=JPiolho0;16239182]By exchanging some values (CRC, Last Modified, Size...) and if those match it's okay and allows server to continue connection to the database.[/QUOTE] All of that can be faked easily.
[QUOTE=Kill coDer;16239241]What if the server is in another country? How will the gamemode deal with a 300ms latency? What if someone hosts a shitload of 64 slot servers and fills it all with bots, does bot_mimic and then just goes nuts? How will your server be able to cope with all that? How exactly are you going to prevent people from modifying the code? CRC checks? A module? I seriously doubt it is anything that an experienced coder can't fool first.. If the gamemode connects to a central server, the person get the MySQL deets, and they can do whatever we like.. This seems extremely exploitable.. I would recommend sending all data through a PHP parser or something like that, then you don't need to give away the MySQL deets. Instead of modifying data directly, tell the server what the player did and then get the real server to decide what to do with the database. That will increase the load on your servers, but reduce the risk of cheaters. It sounds extremely risky! But good luck anyway.. (I can't seriously believe you are doing this...) [editline]11:00PM[/editline] All of that can be faked easily.[/QUOTE] That's what it is doing right now. The database server stands in middle between Game server and MySQL server. The game server sends requests and the database server sends back the data game server asked for. No one will ever have direct access to MySQL server. The LUA files are also inside the module dll and are injected into Gmod at startup (I'll be also obfuscating lua and encrypting them in the dll)
What's stopping someone from editing a hook to give them an advantage then resetting it when they're done?
[QUOTE=Kill coDer;16239363]What's stopping someone from editing a hook to give them an advantage then resetting it when they're done?[/QUOTE] The database server keeps checking for suspicious activity, if it detects something it will warn us and we proceed to studying the logs and if we confirm something wrong we ban the person and all accounts related.
Well.. I seriously doubt you will be able to stop them, but good luck! Injecting the code into the game directly from a module is a good idea actually..
[QUOTE=Kill coDer;16239481]Well.. I seriously doubt you will be able to stop them, but good luck! Injecting the code into the game directly from a module is a good idea actually..[/QUOTE] Yeah, everything is crackable but at least we expect to slow them (crackers) a lot. We're also discussing if we should the gamemode available for "trusted" servers / players only or not. EDIT: Forgot to explain the latency. The redirection system will take care of that. It will automatically choose the most nearby server running the game part where your character is and redirect you to there (Checks Longitude and Latitude). In case you're in a group it chooses the most nearby server of a middle point (median of longitudes and latitudes of all group players). The point of letting people host the server is to allow a more diversity of locations and to hold more players playing at same time.
[QUOTE=Kill coDer;16239481]Well.. I seriously doubt you will be able to stop them, but good luck![/QUOTE] Trust me... we will. They will appreciate to be banned from midage servers and have their steamID show on a public page once the caught cheater actions are verified. Not to mention, exterior admins or server groups (even non-midage) will be free to include the caught IDs to their banlist, this will help every server to stay clean.
If you give out the gamemode, there will DEFINETLY be someone out there hacking the codes and then eventurly hack into the database and destroy it. Just to let you know there is always one or more guys out there trying to ruin gameplay so I prefere just sticking to your own servers :I PS: You mentioned the gamemode is requesting stuff and gathering data from the Database. That means that it is somehow open to the server. It can be extremly exploitable so watch out.
I'm not for the public release of the gamemode source personally, but still JPiolho has the final word.
Oh goddamnit, I might as well stop working on my WIP now that I've seen this. :geno:
Why should you ?
[QUOTE=Telepethi;16258617]Oh goddamnit, I might as well stop working on my WIP now that I've seen this. :geno:[/QUOTE] Don't, Why quit.. I might become better than this in the end.
Hey guys, the team is looking for somone that can texture our models, more specifically organic objects, such as, monsters, and player models... previous work must be shown. If you think your up to it then PM me or JP thanks.
[QUOTE=Mr Affinity;15757488]Don't say MMO because 64 (if it even gets that high) players is not massive.[/QUOTE] does multiple servers mean anything to you?
[QUOTE=Anthracite;16250945]I'm not for the public release of the gamemode source personally, but still JPiolho has the final word.[/QUOTE] i agree, yet disagree with you're idea of not releasing it to the public. Of course, if you don't release it : it'll all be safe, nobody modifying the scripts, etc. But what stops someone from connecting to your servers, then using that to somehow gain access to the database server, then to the mysql server? I'm not a professional hacker, nor have I ever hacked anything before, but where there's a will, there's a way. Someone, somewhere, will somehow figure out a way to break it. Releasing it to the public, although speeding up the process of it being exploited, will allow for more players at once without any costs to you guys, as well as helping smaller servers to gain massive amounts of players through a gamemode that has the potential to be far greater than anything we've seen before. well... scratch that : its already better, in my opinion, than most of the gamemodes we've seen. But : On a more positive, non-security-bashing note, beautiful work. As i said before, this is better than most gamemodes already released and it's far from it's release. When you guys make a decision on the public release situation, it'd be nice to see an open beta. Perhaps find someone willing to run it on a server that you guys trust and giving everyone the IP and having them search for bugs, and just all around have fun on this amazing project. I'd be happy to provide a server for an open beta, and if not, i'd be happy to participate in an open beta. Really, this is some great work, and it's rolling out fast. If i had to give this a rating : 5/5. :D
I really like where this is going, I've got to say. Awaiting release!
Same, I have to say this is going to be the best Garrys Mod, mod ever! I have a few questions to ask, firstly will the Phys Gun be allowed? Secondly will there be buildings that you can own? Third and finally, is it possible to make Armor, like Helmets, Shields and Chest? I am looking forward to this mod!
[QUOTE=Queelee;16522916]Same, I have to say this is going to be the best Garrys Mod, mod ever! I have a few questions to ask, firstly will the Phys Gun be allowed? Secondly will there be buildings that you can own? Third and finally, is it possible to make Armor, like Helmets, Shields and Chest? I am looking forward to this mod![/QUOTE] c'mon, read the whole thread, its only 4 pages. they talk about all of this.
1. remote databases lag like fuck 2. it [i]will[/i] get hacked I've already offered hosting via PM.
[QUOTE='-[ Fizzadar ]-;16525716']1. remote databases lag like fuck 2. it [i]will[/i] get hacked I've already offered hosting via PM.[/QUOTE] :smug: Can't wait!
If there is a will, there is a way >_Ô
We're now looking for people to test and give feedback of the development. PM-me with your apply (I won't accept requests at this thread). You need to be sure you want to do this and be capable of providing feedback of working features. Only serious people and preferably that already played or plays MMORPG games. If you can do models, textures or anything else that could help Midage : Gmod just say it on the PM too. You need to be highly interested in this gamemode and to be present often in the testings. PM-me for more info or to apply.
Sorry, you need to Log In to post a reply to this thread.