Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Login Protection Software?

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> General programming
View previous topic :: View next topic  
Author Message
The0neThe0nly
Expert Cheater
Reputation: 0

Joined: 08 Dec 2009
Posts: 119
Location: In a box

PostPosted: Sun May 20, 2012 5:58 pm    Post subject: Login Protection Software? Reply with quote

Hey I made a program recently and I want to make it require you to log in to access the program.

I need to be able to create the "accounts" too.

Is there an easy way I can protect my program with this kind of system?

It would be helpful if I could possibly "shut down" accounts too.
Back to top
View user's profile Send private message
NotReallySureWhatGoesHere
Expert Cheater
Reputation: -1

Joined: 20 Feb 2012
Posts: 110

PostPosted: Sun May 20, 2012 11:50 pm    Post subject: Reply with quote

Using authentication is the way to go, or at least it always helps!

http://oauth.net/code/

Then on your server side, have some type of database MySQL, PostgreSQL, etc. and have it check for the username/password/id/etc. That's how I'd do it.

EDIT: If you want to lock an account I'd make a field in the database called "enabled" and set that to 0 or 1, also have your application check it.
Back to top
View user's profile Send private message
Innovation
Grandmaster Cheater
Reputation: 12

Joined: 14 Aug 2008
Posts: 617

PostPosted: Mon May 21, 2012 11:47 am    Post subject: Reply with quote

There's no indefinite way to prevent people from cracking your program, but DRM might help fend them off for a while.

Last edited by Innovation on Fri Jun 01, 2012 4:56 am; edited 1 time in total
Back to top
View user's profile Send private message
Slugsnack
Grandmaster Cheater Supreme
Reputation: 71

Joined: 24 Jan 2007
Posts: 1857

PostPosted: Mon May 21, 2012 9:48 pm    Post subject: Reply with quote

It's Just Josh wrote:
Using authentication is the way to go, or at least it always helps!

http://oauth.net/code/

Then on your server side, have some type of database MySQL, PostgreSQL, etc. and have it check for the username/password/id/etc. That's how I'd do it.

EDIT: If you want to lock an account I'd make a field in the database called "enabled" and set that to 0 or 1, also have your application check it.

i assume by application you mean the server code. having the flag check on the client side is as good as not having one at all
Back to top
View user's profile Send private message
atom0s
Moderator
Reputation: 205

Joined: 25 Jan 2006
Posts: 8587
Location: 127.0.0.1

PostPosted: Tue May 22, 2012 5:28 am    Post subject: Reply with quote

If you plan on using some sort of login system, you will need to be doing more to prevent people from using your application than just a simple 'Failed to login!' screen. Like Slug said, you'd be better off just not having any security then. You will need to extend your protection(s) to prevent the client from working. Such as:

- Crc32 checks (Prevent modifications to your binary.)
- Md5 checks (Prevent modifications to your binary.)
- Streamed data chunks
- Streamed required data (offsets, pointers, etc.)

Your best options are going to be streaming portions of your code to require the application to have a valid connection to your server. Which you can bind sessions to levels of access, as well as banning them from your application.

If you stream portions of the code that are the main body of your application it will prevent cracking from happening easily without a valid account. Not to say it wont happen ever, it will just be harder then.

Either way, there is no good answer for this. Any type of protection you come up with will have its own flaws.

_________________
- Retired.
Back to top
View user's profile Send private message Visit poster's website
NotReallySureWhatGoesHere
Expert Cheater
Reputation: -1

Joined: 20 Feb 2012
Posts: 110

PostPosted: Tue May 22, 2012 10:44 am    Post subject: Reply with quote

Slugsnack wrote:
It's Just Josh wrote:
Using authentication is the way to go, or at least it always helps!

http://oauth.net/code/

Then on your server side, have some type of database MySQL, PostgreSQL, etc. and have it check for the username/password/id/etc. That's how I'd do it.

EDIT: If you want to lock an account I'd make a field in the database called "enabled" and set that to 0 or 1, also have your application check it.

i assume by application you mean the server code. having the flag check on the client side is as good as not having one at all


Whoops, I made a mistake Embarassed
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> General programming All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites