Stop people making themselves staff and crediting dp's

[gazsr123]

Hi, I have been stuck with this problem for a while and just would like to know how to patch people from making themselves staff and crediting themselves dp's. The person even made himself level 200.

I would appreciate it if someone could help.

Thanks. :)

[gazsr123]

I have a staff on my staff panel so it prevents hackers from carrying out the worst stuff, but theirs a guy who proved to me by giving himself a dp but he didnt do it via the staff panel. :S

[Jordan Palmer]

The only thing you can do is secure your game properly, you can put things in the way to make it harder for hackers like changing the user_level to something else, staff password, ect but this will only slow them down..

 

 

[gazsr123]

Yep I got a password on the staff panel but mate it would be great if you can help me patch the common hacks like i just explained.

[Jordan Palmer]

There are a few articles already, Using the search button usually helps ;)

 

Which pages to secure your game

A few simple lines of code to help

Secuity tutorial

Very basic look into security

 

 

There are a few which could help, Thats just around our site, Google may be of help to :)

[SilvaTungDevil]

If you wanted a short temporary fix whilst you was reading up on your security.

Open up all your staff pages, and inside every function at the top (underneath global $ir, $db; ... )

Put

 

if($ir['userid'] != 1 || (otherstaffID) || (anotherstaffid))
     	{
      	echo ' You should not be here ';
    	$h->endpage();
    	exit;
    	}

 

Make sure you do that on Every function within the staff panel. And remember its only a temporary as everytime you get new staff you would need to add the ID.

Brush up on some security techniques like Jordan suggested.

 

N.b Yes, I thought about putting it in an array, but was keeping it simple and like I said this is not the final solution.

[gazsr123]

Right cheers for that guys. :)

I've looked on some articles and finally secured some places and will continue to you.