Mystical Posted February 4, 2011 Posted February 4, 2011 I run a few websites and have never been hacked "knock on wood" I use this http://www.cloudflare.com/ I haven't tried it with McCodes yet as I am still working on my site but I will. Do you think it will work with this script? Opinions from the security gurus here are most welcome..... :) Quote
Paul Evans Posted February 4, 2011 Posted February 4, 2011 Your kidding right 20 dollars a month for 12 months is 240 a year, say you own a game ie: open 5 years (1,200 USD) Why not pay the one off payment to a security expert or get a secure script? Quote
devonbnice Posted February 4, 2011 Posted February 4, 2011 It seams pretty nice, They mentioned that you dont need to change servers or change any code. So i dont see why it wouldnt work for mccodes. I might have to try it out one of these days, if i ever get around to launching a game. Quote
devonbnice Posted February 4, 2011 Posted February 4, 2011 Your kidding right 20 dollars a month for 12 months is 240 a year, say you own a game ie: open 5 years (1,200 USD) Why not pay the one off payment to a security expert or get a secure script? It's also free if you just want your game secure, you just wont know what happening with your game. Quote
Mystical Posted February 4, 2011 Author Posted February 4, 2011 Your kidding right 20 dollars a month for 12 months is 240 a year, say you own a game ie: open 5 years (1,200 USD) Why not pay the one off payment to a security expert or get a secure script? There is a free version..... My question was do you think it would work for this script? From what I have read here so far you seem pretty smart when it comes to security. I would like your opinion on the secure part. I am not paying 20 dollars a month....that would be stupid...but say for people who cant afford to hire someone? Quote
Paul Evans Posted February 4, 2011 Posted February 4, 2011 there is noway the free edition will be complete secure also there is noway they could do it to my knowledge unless they change your code it seems like one of them header code protections. which are pointless. Give me one of your URLs which you believe to be secure. Quote
The Spirit Posted February 4, 2011 Posted February 4, 2011 It states on their website that the free version doesnt include Web Application Firewall (WAF) POST content verification Posted Content Analysis (SQL) Web vulnerability control (XSS) SSL Quote
rulerofzu Posted February 5, 2011 Posted February 5, 2011 At a guess this is kinda like the old zend framework which was then taken and developed into inspekt. The idea is that you wrap your code in a secure enviroment and let that check the input and output. For example INPUT with my crap code -> CHECK WITH BETTER MORE LONG WINDED CODE -> Display the result or throw an error. http://www.cloudflare.com/wiki/Client_Interface_API I really do not see any need for it. Secure your code. Produce better code. Keep your eye on PHP releases for important security notices. Also I do not see anything there you couldnt do for minimal cost or free. http://www.configserver.com/cp/csf.html for example. Quote
lucky3809 Posted February 6, 2011 Posted February 6, 2011 Bad idea, because all IP's will be the same because they are filtered through cloudflare and everyone will have Cloudflares IP address. I wouldnt use it for a game, for a regular website would be fine but not for a game that logs IP's and what not. Quote
Drizzah Posted February 12, 2011 Posted February 12, 2011 Bad idea, because all IP's will be the same because they are filtered through cloudflare and everyone will have Cloudflares IP address. I wouldnt use it for a game, for a regular website would be fine but not for a game that logs IP's and what not. Absolutely right. Also, if you block users from using proxies. All users will be blocked. I only know this as I tried already. Quote
rulerofzu Posted February 12, 2011 Posted February 12, 2011 if you block users from using proxies. All users will be blocked. Jesus the level of intelligence on this forum has just dropped even further. Quote
Drizzah Posted February 12, 2011 Posted February 12, 2011 Jesus the level of intelligence on this forum has just dropped even further. There is a lot of people on this forum who would have wasted their time going to cloudflare without saying "proxies". Just because you knew what everything meant the day you started coding does not mean everyone else did! You will also have to change your name servers to theirs for those of you not as smart :P Quote
rulerofzu Posted February 12, 2011 Posted February 12, 2011 Cmon good god. Blocking proxies blocks all your users? If id thought you was joking id have found it funny but as I think your actually serious about that then its not funny its just plain stupid. Quote
Paul Evans Posted February 12, 2011 Posted February 12, 2011 this entire thread is pointless, block proxies and you block all users... wtf smoked too much today kiddo? Quote
Drizzah Posted February 12, 2011 Posted February 12, 2011 For one, you can block proxies and still have users playing. The only ones blocked are those using proxies. I myself didn't know cloudflare was going to make everyone seem to be using proxies until I tried using it. I simply added that for people that wouldn't know what the above post before mine meant. Simply because I didn't know myself what it meant at first. You see' I have never used proxies in my life and only hear about them. Since people usually use them when trying to cheat and/or hack someone's site. Because I do not do things like that. I am not familiar with it. You know, you could have just posted back and let me know it meant the same. I guess it would have been to high for your standards. Quote
Djkanna Posted February 12, 2011 Posted February 12, 2011 Ah now I see, you block all proxies (which you shouldn't do anyway) and then use this thing all your users would be blocked as this makes it seem as if the user is using a proxy, in which you are blocking all your users. That makes sense... Right? Quote
Drizzah Posted February 12, 2011 Posted February 12, 2011 Ah now I see, you block all proxies (which you shouldn't do anyway) and then use this thing all your users would be blocked as this makes it seem as if the user is using a proxy, in which you are blocking all your users. That makes sense... Right? That is exactly what I was trying to say. Thanks for helping clear that up. Quote
Paul Evans Posted February 12, 2011 Posted February 12, 2011 why not just allow the proxies they run on and block lame proxies like web proxies (i wouldn't personally advise blocking any proxies) If you had made your post more informative then maybe people wouldn't reply thinking you was referring to something else ;) just a FYI If you pay for this script then ... wow but if your using the free version it doesn't cover some aspects and your back to square one also if your using this with MC they have a ip blocker... then if the proxies rotate (i assume they will) then your buggered once again i believe most functions like staff logs and so on also would be rather buggered (think other Engines run similar). Waste of time, just do your bloody work properly it's quite simple. All free versions are limited... unless they are intentionally FREE which this isn't. Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.