[mccode] stop same ip transfers

[bocco]

Re: stop same ip transfers

Is there a way to stop same IP transfers with ITEMS ?

if there is can you please assist me.

[bocco]

Re: [mccode] stop same ip transfers

Never mind i have figured out the code myself

[Zero-Affect]

Re: [mccode] stop same ip transfers

if you do that then why need staff lol

i mean add a filter to all inputs (not using header) from cuss words

stop ip xfers...

patch all exploits

and you have a game which runs itself lol

[bocco]

Re: [mccode] stop same ip transfers

i understand that all this security in multi transfers makes it unnecessary for staff, but there is so much more still to look over

[Haunted Dawg]

Re: [mccode] stop same ip transfers

Staff sometime's tend to get lazy and stop doing there job properly. That's the time you boot them!

[Zero-Affect]

Re: [mccode] stop same ip transfers

yeah there are more aspects to look at but basically doing this your inviting them to learn how to make multi's via proxies

i think the statistic maybe wrong but 25% of RPG users know what a proxy is

10% know how to exploit

[Guest Anonymous]

Re: [mccode] stop same ip transfers

Problems:

REMOTE_ADDR can contain a comma separated list of IP(v4) AND IP(v6) addresses.

REMOTE_ADDR on it's own (or linked with X_HTTP_FORWARDED_FOR) is insufficent for accurate IP detection.

Neither mechanisms will cope with rotating proxies - like AOL.

Solutions:

There are a couple, one is very good, but a lot more complex requiring work in multiple languages. The other can be done reasonably well in PHP.

[Andrewelli]

to stop same ip tranfers for items use this in itemsend.php sorry just noticed someone asked for it any never posted the anwser

$_GET['user'] = abs((int) $_GET['user']);

$check=$db->query("select userid, lastip_login FROM users where userid ={$_GET['user']}");

$r=$db->fetch_row($check);

if($ir['lastip_login'] == $r['lastip_login'])

{

die("No same ip transfers allowed");

}

[BmFx-KiNgZz]

fair play i just started so u prob do this

$_GET['user'] = abs((int) $_GET['user']);

$check=$db->query("select userid, lastip_login FROM users where userid ='.$_GET['user'].'");

$r=$db->fetch_row($check);

if($ir['lastip_login'] == $r['lastip_login'])

{

echo "No same ip transfers allowed";

}

[Djkanna]

The above wouldn't function correctly, rather the query wouldn't, the post above the other would work (though BmFx is correct die() sucks (or evil if you'd like)).

Anyway to the point, you cannot check the validity of an IP address, that's the problem, anonymity of the web.

[Andrewelli]

it is fully tested Djkanna and it worked 100% for me

[Andrewelli]

im sorry i thought you were talking about my work ha yea the post below mine wouldnt work.

[Djkanna]

it is fully tested Djkanna and it worked 100% for me

Yours works yes, BmFx's query is likely to fail.

"'.$var.'" doesn't work as expected.

However checking IP address' is a poor inadequate and ineffective way of tracking a user.

You blacklist my IP, two minutes later I'm back and running (I'd have to get up to restart the router).

And then there is proxies which well is for another time.

As I said before, that's the 'anonymity of the web'.

:)

[Andrewelli]

i blocked proxys

[Djkanna]

i blocked proxys

That's an even worse idea.

Some legitimate users are using proxies for specific reasons, for example AOL (have they changed yet?).

[rulerofzu]

I'd have to get up to restart the router

Get a long stick DJK!

[Djkanna]

Tehehe, I'd need one that goes round a few corners, but I'm sure it's possible. :D

[Andrewelli]

yea they changed and lol a long stick would work. XD

[rulerofzu]

There is no real way to stop this. Ever scenario has a solution.

Player makes account A

Player makes account B using a proxy or free online proxy or simply uses another IP assigned from their router (country dependant quite rife in USA i believe)

So makes them both a legit account.

You only solution is to watch the logs. From my experience legit players hate it with a passion and will quite happily spot multi accounts and report them in for you to look at.