ip ban? 10 char
Hey MPGH.
Every time i publish my server my database gets flooded by thousands account's with random names.
Seems like someone is willing to destroy the fun.
Anyone here whos able to make a fix for me/everyone?
Maybe a captcha or something like this?
or simply just:
- make it whitelisted
- make register on a website and make it import info into db
ip ban if accounts have same ip
News Force Head Editor from 09/14/2018 - 03/02/2020
Publicist from 11/23/2017 - 06/07/2019
Global Moderator since 09/24/2017
Minion+ from 04/16/2017 - 09/24/2017
Market Place Minion from 04/16/2017 - 09/24/2017
Minecraft Minion from 02/23/2017 - 09/24/2017
Realm of the Mad God Minion from 11/06/2016 - 09/24/2017
Middleman from 09/14/2016 - 09/24/2017
News Force Editor from 08/23/2016 - 09/14/2018
News Force (Section of the Week) from 03/21/2016 - 07/17/2017
News Force (User News) from 10/18/2015 - 09/14/2018
Donator since 03/16/2015
Realm of the Mad God Editor from 05/20/2014 - 07/08/2014
Member since 12/23/2012
Rep Power: 82
Or you can just add so you can have a max for X accounts per IP. Shouldn't be that hard to implement.
What donran mentioned should be quite easy to do as you can request the IP of every user you get that tries to connect to the server.exe, which you can take advantage off while making ban systems and such. It should also not be hard to make a ban system like prod has it where you can't load the account at all.
After looking again on what you had posted I see that what you want to achieve here is not really a strong possability thanks to the way AS3 works with Bytecode. I'm sure it could be made with some major editing but You'd be better off using a system for you server side registration to limit the amount of accounts one IP could use but you can also look into using Email Verifications or using a website to register the accounts and remove the registration feature from the system completely.
P.S Removing the registration form from the client and the registration system from server.exe is very easy.
But would the players want to do this? Anyone that can get access to the database can get the passwords and emails of all the players. This is not a safe route. This is really the only reason why we use Usernames instead of Email verification as someone in the past had found the passwords and emails and was able to hack into the accounts on Production.
News Force Head Editor from 09/14/2018 - 03/02/2020
Publicist from 11/23/2017 - 06/07/2019
Global Moderator since 09/24/2017
Minion+ from 04/16/2017 - 09/24/2017
Market Place Minion from 04/16/2017 - 09/24/2017
Minecraft Minion from 02/23/2017 - 09/24/2017
Realm of the Mad God Minion from 11/06/2016 - 09/24/2017
Middleman from 09/14/2016 - 09/24/2017
News Force Editor from 08/23/2016 - 09/14/2018
News Force (Section of the Week) from 03/21/2016 - 07/17/2017
News Force (User News) from 10/18/2015 - 09/14/2018
Donator since 03/16/2015
Realm of the Mad God Editor from 05/20/2014 - 07/08/2014
Member since 12/23/2012
Rep Power: 82
My server will use both usernames and emails, The only reason I have email is because you need to be able to reset your password if you forget it without contacting an administrator. If a person doesn't like it then they don't have to register.
Besides, I have added security on my server.
News Force Head Editor from 09/14/2018 - 03/02/2020
Publicist from 11/23/2017 - 06/07/2019
Global Moderator since 09/24/2017
Minion+ from 04/16/2017 - 09/24/2017
Market Place Minion from 04/16/2017 - 09/24/2017
Minecraft Minion from 02/23/2017 - 09/24/2017
Realm of the Mad God Minion from 11/06/2016 - 09/24/2017
Middleman from 09/14/2016 - 09/24/2017
News Force Editor from 08/23/2016 - 09/14/2018
News Force (Section of the Week) from 03/21/2016 - 07/17/2017
News Force (User News) from 10/18/2015 - 09/14/2018
Donator since 03/16/2015
Realm of the Mad God Editor from 05/20/2014 - 07/08/2014
Member since 12/23/2012
Rep Power: 82