Mccodes Patched

[Sethenor2]

Hi i have mccodes v2 the patched version,

Just a question has it really been secured or does it still have vulnerabilities

Thanks Sethenor

[Danny696]

I belive it still have vunrebilities :)

[Jordan Palmer]

Hi seth,

 

MCCodes 'patched' version does indeed still have some serious vulnerability issues, I have seen the MCCode patched version so I can safely say it does lol.

[Sethenor2]

Haha ok thanks jordan and danny

[Spudinski]

Before anyone comes to a conclusion of how secure MCCodes really is, mind showing some sort of "proof" on your so-called "security" expertise?

I'm not trying to be nasty, but most people here just flame at every occasion they can. It really frightens me that people can call themselves "security experts" while they don't even understand the underlaying concepts of their "expert security" language that is PHP or similar.

Granted, there are people on here who actually "know" what they are saying; and that's a pretty good thing. But for the people who "think" they know it all, shu-up.

/note: Not being nasty, but see it from my point of view.

[Guest George || Apollis]

I agree with Spud.

I believe that Mccodes is probably the most successfull and probably the best game engine there is for browser games without making your own from scratch. Its great for beginners but hence the need for a bit of money to make it succeed. As always, my father once said you need money to earn money, but you also need skill to earn money.

[Zero-Affect]

i exploited both their samples, so i would say its insecure... proof enough for you Spud?

[Jordan Palmer]

@Spud; I have seen the source code, I know what's exploitable to a degree, I even shown ColdBlooded A bug & why it'd be better to use something else and he actually agreed, so I'd say that's enough prove for me too

 

@George; MCCodes is big and popular because it's very easy to get your hands on, If you had too pay for it each time, Not many would be around.

[Zero-Affect]

I even shown ColdBlooded A bug & why it'd be better to use something else

I like that lol so is that because you have shown CB a exploit or due to you seeing the source code or even because you know what's exploitable to a degree?

Personally i'd say your security will be lacking as is mine you'll probably just be showing the basic exploits like XSS. Do tell what exploit you showed him.

I think i reported about 10 exploits lol in the 20 minutes i was on there and maybe a few more later.

(this isn't a who's is bigger contest im just simple stating it's not difficult)

@ george it's only popular because Torn is still active.

[Guest George || Apollis]

@Jordan

very true but I still think McCodes gives you the highest degree of customization, unlike GRPG, Mccodes is much easier to do a full design change. It may have bugs but not everything is perfect and Jordan I agree with your idea, I think they should get some others to test. If they had to pay for it, not many would be around is true, but thats great for McCodes, great for game owners who want less cruddy competition but bad I guess for Crimgame and programmers as they may not have as much business.

Edit: @crim

I personally never heard of Torn when I found out about McCodes and MWG, only after I came to MWG did I actually find out there was a game called Torn. I dislike the style of that game sorry, just my opinion. Not something I would personally play.

[Zero-Affect]

Personally i don't play but i have been on it and the community is amazing, MC is a clone of Torn so... and some MC coders actually play Torn (kyle).

[Jordan Palmer]

I never said it was difficult simply stating that CB knew I was right so in all fairness I'd say I can sit here and bitch about it, I think the bug I quickly checked was there 'patch' for the IP Hack as I was recoding the header for someone and noticed there new code's still lacked.

 

@Crim; I'm no expert in security I know my fair share like everyone

[Djkanna]

I cannot say for certain if it is or it is not, however if past events have proven anything I'd say it still somewhat lacks in that department.

You're probably best to pay someone like CrimGame or Jordan to do it for you, rather than wait for MCC to get it done.

SideBar: I have no doubt they will get it done however it is bound to take some time, so it is quicker to get someone to do it for you (or do it yourself).

[Spudinski]

This is not a rant about how good "you" are - and this counts for most of you -, it really doesn't matter how insecure or vulnerable you make your programs/applications. It's about your "actual" understanding of what secures your script in the first darn place. Security isn't just "filtering" your input variables(even though most of you do that wrong as well), it's understanding the combination of the OS, applications and scripts(in this case the tiny PHP ones) work together to produce that simple thing you call a web page.

With that said, don't say you know what exploitable "is", if you just think your beginning to even grasp the concept.

Also, I am in no way a security expert, nor even a PHP expert - but I've seen people who are, and most of the times they don't sit and b!tch about how exploitable something is they rather stand up and do something about it.

CrimGame: I mean this in no offense, but it's not a beauty prize how much vulnerabilities you have found. Rather focus on your game, which I know will be much better - security wise - and it will make for other people's happiness.

Jordan: I told you this once in PM, I can't believe my eyes that you are trying to insult MCCodes. You may have your opinion, but keep it out of context of this forum. You don't go to your boss and tell him the coffee makes makes bad coffee and trow the cup in his face, so don't sit and complain about MCCodes - do something to better it in the way you think it is not.

[Zero-Affect]

thanks for the advice babes:P

[Jordan Palmer]

Spud - I'll tell the truth regardless off my status on this forum, I've already told coldblooded that too, He agreed, So please take it up with him.

[Zero-Affect]

but Jordan it doesn't actually matter how you feel your a admin and your represent MCC on this forum so disrespecting it isn't the best for members to see specially when your a admin lol

for me it's fine im only the top poster dabs is a noob and he knows it lol (joke)

[Jordan Palmer]

I don't really care, I'm doing them a favour by being a mod, I've already told ColdBlooded I'll speak the truth no matter what, If spud don't like it, he can go cb, I know I'm representing MCCodes but should I lie? no, I should speak the truth, and there new patched codes isn't very patched, If they wanna get respect they need to patch them correctly.

[Equinox]

McCodes has its flaws and I'm pretty sure the new patched version has new flaws aswell. I can't really comment much as I haven't seen this new patched version, however I think I can assume that they've just gone over the files and fixed the most popular exploits.

I think the best thing for McCodes is to have a full body work and I mean rip it to shreds and then piece it back together. In the long run this will work out much better for McCodes.

As much as I dislike McCodes, it's still a good thing. Not only is it used a lot, it has bought together this community.

If you have that much of a problem with McCodes, leave :P

[Guest George || Apollis]

Mccodes is currently not going to spend its time fixing up v2 completely as they are working on v3 which will hopefully be secured. I think just find a friend who will secure it for you, or hire lets say crim to do it :P he shouldn't be complaining as he is earning a bit of cash from this lol.

[Zero-Affect]

The security is lacking and i do admit that is a bonus for people who do security but i mean i did offer to help :P

[Dominion]

mccodes has so many mods and recodes now i think 1/2 the files are on here already secure as free mods thing is mccodes should be putting time into v2/v1 (not lite since its free) before v3 if they don't everything will be on v3 bad engine = end of mccodes that are them going into an old outdated noob like engine they need to act well people that are still as good as people like crim/jordan and everyone else that spent there time on the engine are still willing to be on mwg and help

 

btw yes its not as good as the claim

 

spud unless hes being paid by mccodes why would he suck up to them at least hes not saying yes waste $100 then find out i and everyone else lied to you about "how secure it is"

[Spudinski]

No one has ever lied about how secure MCCodes is, or isn't and I he is doing it voluntary(meaning it was his choice) so the least he can do is show some respect towards MCCodes.

[Dominion]

never said anyone had just said it was good he was not nothing wrong with pointing it out to new members.

have dabs and cold gone away not seen them around?

[Spudinski]

They are around.