muttis

[grant]

need help am trying to stop muttis on my game but the code i have dont seem to be working any help would be great

 

$checkip = mysql_query("SELECT * FROM `grpgusers` WHERE `ip`='$ip'");


 $ip_exist = mysql_num_rows($checkip);

 if($ip_exist > 0){
$message .= "<div>I'm sorry but you already have an account with this Game</div>";
 }

[a_bertrand]

Well it's not that easy as normally IP changes over time (for the normal users). Also it's extremely easy to use a proxy and therefore come from another IP.

So this kind of fix is actually counter productive as you may block legit users from joining.

[grant]

yes i see that point of view so i mite as well just check all users ip ;)

[a_bertrand]

My point is that IP do not allow to identify users correctly. It may give you an hint if this person could be or not he same... but no real proof.

[grant]

wot about stop them from sending points or money from the same ip ?

[a_bertrand]

That can somehow work... But as said IP doesn't say much you have to be smarter...

[The Spirit]

What do you do to stop this problem a_b?

[grant]

well yes i have all my money / points items logged so that i see wot users are Transfeing to other users but i feel this is not enuff :D

[a_bertrand]

You cannot completely stop the issue, as even if you put a cookie on the browser with some ID then nothing prevent the user to use 2 different browsers etc. What you can do is to have several strategies to catch those behaviors not just one.

- IP check

- Cookie with ID

- Invisible flash or silverlight which store an ID (would be shared across all browsers)

And if one of the 3 strategies fires up an alarm, do some manual checks.

Also, huge transfers for free (so no counter part) between 2 users should rise an alarm as well.