gamble Posted March 7, 2014 Posted March 7, 2014 I have a few questions regarding possible security/development tactics. In a game what should be logged? Should just "money making" pages such as the casino be logged or all pages, or for that matter none? Im just wondering seeing as logs can help improve the game by taking out unused pages and also improve security by seeing what the users do on each page. Quote
Guest Posted March 7, 2014 Posted March 7, 2014 I currently have a setup that logs all player transfers. I am expanding my anti cheat system by logging more of the pages the user visits, the time they visit and a few other variables. Coupled together with an algorithm it can find and detect potential cheats. A lot of things are "flagged" so to say, any high money transfers, any mass transfers within a given time are also flagged for inspection. Quote
gamble Posted March 7, 2014 Author Posted March 7, 2014 Reminds me a lot of a blog i read recently: http://makewebgames.io/entry.php/634-New-heavy-heuristics-sensor You guys should work together and create the ultimate anti-cheat system Quote
Guest Posted March 7, 2014 Posted March 7, 2014 Reminds me a lot of a blog i read recently: http://makewebgames.io/entry.php/634-New-heavy-heuristics-sensor You guys should work together and create the ultimate anti-cheat system The Best anti cheats are in house, private development, otherwise cheats can just read your code, and use techniques that specifically avoid what the "bot" looks for. Quote
Guest Posted March 8, 2014 Posted March 8, 2014 Cant loggin too much info be bad? How would it be bad? Quote
gamble Posted March 8, 2014 Author Posted March 8, 2014 How would it be bad? I assume he is getting at the storage that would be required. Quote
Guest Posted March 8, 2014 Posted March 8, 2014 I assume he is getting at the storage that would be required. Around $80 for a 1TB HDD, 1000GB, 1 million mb. That is a lot of storage for a very cheap price, and it's only going to get cheaper ^_^ Quote
Zettieee Posted March 8, 2014 Posted March 8, 2014 I don't mean storage space lol. Logging every action a user makes is a big task, but is it really needed? Maybe you don't need to log every bit of info, eg: you only really need the file the user was in and how long they stayed (time). No need to log who the user was really? Quote
Guest Posted March 8, 2014 Posted March 8, 2014 I don't mean storage space lol. Logging every action a user makes is a big task, but is it really needed? Maybe you don't need to log every bit of info, eg: you only really need the file the user was in and how long they stayed (time). No need to log who the user was really? Knowing the user(id/name) is pretty critical in banning cheaters don't you think? Quote
Zettieee Posted March 8, 2014 Posted March 8, 2014 The ID is needed but other info doesn't need to be stored Or maybe flush it after x days? Quote
Guest Posted March 8, 2014 Posted March 8, 2014 The ID is needed but other info doesn't need to be stored Or maybe flush it after x days? id is fine, not sure why you would need the other info about the username sorry ^_^. You should never need to delete information, if it was flushed after x days then long term patterns from players cannot be anazyled, slightly vering away from actual security and cheating, but finding patterns in peoples play could determine if they have been hacked. I am currently working on a trail system in which you can track each transaction, then "tag" it so to say, then work out where the money ends up, generally in gaming if you hack an account and send an amount to 1 person your stupid, you want to send it to several accounts, including legit people to put the staff off the scent. Quote
Zettieee Posted March 8, 2014 Posted March 8, 2014 Ah I see now! Nice idea man. What would be the best way to gather this info? A simple function in header or a more in depth system, collecting post and get values? Quote
gamble Posted March 8, 2014 Author Posted March 8, 2014 Another quick question for you guys. How do you/would you guys ideally store the logs? Would you append to a text file or would you go all out with database table and all? Quote
Guest Posted March 8, 2014 Posted March 8, 2014 Another quick question for you guys. How do you/would you guys ideally store the logs? Would you append to a text file or would you go all out with database table and all? Possibly store it in the database for x days then backup to a text file Or just go with appending to a txt file. Would be much simpler Quote
Magictallguy Posted March 8, 2014 Posted March 8, 2014 (edited) The Best anti cheats are in house, private development, otherwise cheats can just read your code, and use techniques that specifically avoid what the "bot" looks for. Quite right! Though, a collab for idea sharing might not be a bad idea ;) Skype's on my profile :) Possibly store it in the database for x days then backup to a text file Or just go with appending to a txt file. Would be much simpler You'll be storing a lot of information. Why not use the database for what it was intended? Information storage! My transaction log uses 1 table, is currently full of around 64,000 rows and working through it to get the information I need is 1 quick query. Using a txt file isn't, in my opinion, a route *anyone* should take if they have database capabilities Edited March 8, 2014 by Magictallguy Quote
Script47 Posted March 8, 2014 Posted March 8, 2014 I logged all the errors, so if a field was left empty, or if something went wrong. It would tell me what page the error occurred, what happened, when and who. Quote
Guest Posted March 8, 2014 Posted March 8, 2014 Quite right! Though, a collab for idea sharing might not be a bad idea ;) Skype's on my profile :) You'll be storing a lot of information. Why not use the database for what it was intended? Information storage! My transaction log uses 1 table, is currently full of around 64,000 rows and working through it to get the information I need is 1 quick query. Using a txt file isn't, in my opinion, a route *anyone* should take if they have database capabilities Last time I had you added you just removed me, no idea why haha. Agree on the last point for sure. However if you do a have a limit like some hosts do on the max size of a table/database then text files is always a good fallback Quote
gamble Posted March 8, 2014 Author Posted March 8, 2014 Or merger the 2. After x amount of days move from the DB to a text file. Quote
Magictallguy Posted March 8, 2014 Posted March 8, 2014 (edited) Last time I had you added you just removed me, no idea why haha. Agree on the last point for sure. However if you do a have a limit like some hosts do on the max size of a table/database then text files is always a good fallback If it's max table size then .. get a better host! If that's not an option, then write a backup query that handles overspill from the original table and creates/inserts into the new table automatically. If it's database size, then create another database designed specifically for handling the player transaction logs! If it's both, then combine the methods Edited March 8, 2014 by Magictallguy Added "If it's both [...]" Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.