User Tag List

Results 1 to 3 of 3

Thread: How secure are extensions like URL Encoder?

  1. #1
    Clicker Fusion 2.5 DeveloperHTML5 Export ModuleSWF Export ModuleInstall Creator Pro
    Fusion 2.5 (Steam)Fusion 2.5 Developer (Steam)Fusion 2.5+ DLC (Steam)Android Export Module (Steam)HTML5 Export Module (Steam)iOS Export Module (Steam)Universal Windows Platform Export Module (Steam)

    Join Date
    Jul 2006
    Location
    USA
    Posts
    2,982
    Mentioned
    2 Post(s)
    Tagged
    0 Thread(s)

    How secure are extensions like URL Encoder?

    I'd like to make some sort of online scoreboard/leaderboard for my games. I've downloaded tutorials with php scripts to make it myself. They use a combination of URL Encoder and Live Receiver objects.

    I'm just curious if these are really secure, or it is not that hard to hack them.

    I mean granted pretty much anything can be hacked, and I probably wouldn't have to worry about a small time indie game scoreboard being hacked (and even if it was, wouldn't be the end of the world especially if I backed up the database regularly).

    But I was curious just how secure these extensions actually are. Again, I'm not worried about having some sort of military grade security lol, but I would like to prevent the average script kiddie from wrecking things.

  2. #2
    Clickteam Clickteam
    Jeff's Avatar
    Join Date
    Jun 2006
    Location
    Battle Ground Washington
    Posts
    11,825
    Mentioned
    8 Post(s)
    Tagged
    2 Thread(s)

    Re: How secure are extensions like URL Encoder?

    Its pretty hard to hack if you use an MD5 hash on your submitted data.

    There is a good tutorial about this here:
    http://www.clickteam.com/epicenter/ubbthreads.php?ubb=showflat&Number=114131

    If you need some help getting going.

    Lets not have a long thread about the security of an MD5 Hash
    For protecting data to an online score board its works very good and I haven't actually seen take the time to break it in this type of usage.

    Just use a very long and very odd key -- Don't send the key in your URL and for an extra security you might even consider encrypting your key inside your application. I never go to that extreme but you could.





  3. #3
    Clicker Fusion 2.5 DeveloperHTML5 Export ModuleSWF Export ModuleInstall Creator Pro
    Fusion 2.5 (Steam)Fusion 2.5 Developer (Steam)Fusion 2.5+ DLC (Steam)Android Export Module (Steam)HTML5 Export Module (Steam)iOS Export Module (Steam)Universal Windows Platform Export Module (Steam)

    Join Date
    Jul 2006
    Location
    USA
    Posts
    2,982
    Mentioned
    2 Post(s)
    Tagged
    0 Thread(s)

    Re: How secure are extensions like URL Encoder?

    Quote Originally Posted by Jeff
    Its pretty hard to hack if you use an MD5 hash on your submitted data.

    There is a good tutorial about this here:
    http://www.clickteam.com/epicenter/ubbthreads.php?ubb=showflat&Number=114131

    If you need some help getting going.

    Lets not have a long thread about the security of an MD5 Hash
    For protecting data to an online score board its works very good and I haven't actually seen take the time to break it in this type of usage.

    Just use a very long and very odd key -- Don't send the key in your URL and for an extra security you might even consider encrypting your key inside your application. I never go to that extreme but you could.



    Okay cool. Thanks for the link and tips! Appreciate it.

Similar Threads

  1. I'm looking for a secure way to connect the users
    By Nekorai in forum Multimedia Fusion 2 - Technical Support
    Replies: 0
    Last Post: 25th March 2013, 09:25 PM
  2. String Tokenizer , URL Encoder
    By dinktheboss in forum Multimedia Fusion 2 - Technical Support
    Replies: 5
    Last Post: 17th September 2012, 06:56 PM
  3. URL Encoder
    By LIJI in forum Released Extensions
    Replies: 2
    Last Post: 16th February 2012, 03:17 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •