Money sql injection

[Criminal]

Hi on my game i am concerned that how the players are getting loads of money i dunno how there getting so much money in first day does any one know the sql injection secure code so there cant cheat and get loads of money thank you for your time. :x

[Guest Anonymous]

Re: Money sql injection

I little more information could be useful here ...

1. PHP version

2. MySQL version

3. Source platform .. DBS/MCcodes I assume?

4. Have you access to the web server logs (httpd logs)

5. URL of said game?

[Criminal]

Re: Money sql injection

Its mccode v2 game php version.

[Spudinski]

Re: Money sql injection

IT could be that your crime rates/payouts are set to high, thus resulting in your users having a ton of money.

Just set them lower, I doubt someone is trying anything wiht your website. :)

[Criminal]

Re: Money sql injection

crime rate is less and i give less payments

[03laceys]

Re: Money sql injection

URL?

[Floydian]

Re: Money sql injection

 

.....I doubt someone is trying anything wiht your website. :)

 

(SNIPPED)

Why you say that? I've seen a ton of folks come into cove of pirates and try to cheat the game, many of them using, or attempting to use mysql injection.

Unfortunately, an answer to how to stop people from cheating your game would require some diagnosing. Once would need to know what they are exploiting before that can be fixed. You could find a sorts of code for validating input/protecting against sql injection, but if there are 100 places in you code that could potentially be open to such attacks, are you going to go through each one?

You should of course go through them all, but I suspect you are either not a coder, or you are "eh" at coding and thus prolly don't have the necessary skills to find/fix the problem on your won.

Therefore, my advice is to hire someone to fix it for you.

[Spudinski]

Re: Money sql injection

 

.....I doubt someone is trying anything wiht your website. :)

 

(SNIPPED)

Why you say that? I've seen a ton of folks come into cove of pirates and try to cheat the game, many of them using, or attempting to use mysql injection.

Unfortunately, an answer to how to stop people from cheating your game would require some diagnosing. Once would need to know what they are exploiting before that can be fixed. You could find a sorts of code for validating input/protecting against sql injection, but if there are 100 places in you code that could potentially be open to such attacks, are you going to go through each one?

You should of course go through them all, but I suspect you are either not a coder, or you are "eh" at coding and thus prolly don't have the necessary skills to find/fix the problem on your won.

Therefore, my advice is to hire someone to fix it for you.

 

Sure, why not dive into securing you game against sql inject and such.

But by my post, I was not ruling out the possibility of a vulnerability being abused by someone.

A main problem with programmers these days are that they are so focused on securing their websites against any type of vulnerability that could be exploited by someone,they tend to miss the most common of mistakes they make while structuring the database or building their scripts.

But I agree with you, Dragon_killer123 should get a professional to inspect the code thoroughly.

[03laceys]

Re: Money sql injection

It sounds as if someone is exploiting a script on your game, the most common is the item market and crystals market i old check these.

[Floydian]

Re: Money sql injection

No doubt Spudinski, balancing a game is tough work. And I guess there isn't much point in worrying about cheaters if you game's economy is going to explode out of control lol