| View previous topic :: View next topic |
| Author |
Message |
The0neThe0nly Expert Cheater
Reputation: 0
Joined: 08 Dec 2009 Posts: 119 Location: In a box
|
Posted: Sun May 20, 2012 5:58 pm Post subject: Login Protection Software? |
|
|
Hey I made a program recently and I want to make it require you to log in to access the program.
I need to be able to create the "accounts" too.
Is there an easy way I can protect my program with this kind of system?
It would be helpful if I could possibly "shut down" accounts too.
|
|
| Back to top |
|
 |
NotReallySureWhatGoesHere Expert Cheater
Reputation: -1
Joined: 20 Feb 2012 Posts: 110
|
Posted: Sun May 20, 2012 11:50 pm Post subject: |
|
|
Using authentication is the way to go, or at least it always helps!
http://oauth.net/code/
Then on your server side, have some type of database MySQL, PostgreSQL, etc. and have it check for the username/password/id/etc. That's how I'd do it.
EDIT: If you want to lock an account I'd make a field in the database called "enabled" and set that to 0 or 1, also have your application check it.
|
|
| Back to top |
|
 |
Innovation Grandmaster Cheater
Reputation: 12
Joined: 14 Aug 2008 Posts: 617
|
Posted: Mon May 21, 2012 11:47 am Post subject: |
|
|
There's no indefinite way to prevent people from cracking your program, but DRM might help fend them off for a while.
Last edited by Innovation on Fri Jun 01, 2012 4:56 am; edited 1 time in total |
|
| Back to top |
|
 |
Slugsnack Grandmaster Cheater Supreme
Reputation: 71
Joined: 24 Jan 2007 Posts: 1857
|
Posted: Mon May 21, 2012 9:48 pm Post subject: |
|
|
| It's Just Josh wrote: | Using authentication is the way to go, or at least it always helps!
http://oauth.net/code/
Then on your server side, have some type of database MySQL, PostgreSQL, etc. and have it check for the username/password/id/etc. That's how I'd do it.
EDIT: If you want to lock an account I'd make a field in the database called "enabled" and set that to 0 or 1, also have your application check it. |
i assume by application you mean the server code. having the flag check on the client side is as good as not having one at all
|
|
| Back to top |
|
 |
atom0s Moderator
Reputation: 205
Joined: 25 Jan 2006 Posts: 8587 Location: 127.0.0.1
|
Posted: Tue May 22, 2012 5:28 am Post subject: |
|
|
If you plan on using some sort of login system, you will need to be doing more to prevent people from using your application than just a simple 'Failed to login!' screen. Like Slug said, you'd be better off just not having any security then. You will need to extend your protection(s) to prevent the client from working. Such as:
- Crc32 checks (Prevent modifications to your binary.)
- Md5 checks (Prevent modifications to your binary.)
- Streamed data chunks
- Streamed required data (offsets, pointers, etc.)
Your best options are going to be streaming portions of your code to require the application to have a valid connection to your server. Which you can bind sessions to levels of access, as well as banning them from your application.
If you stream portions of the code that are the main body of your application it will prevent cracking from happening easily without a valid account. Not to say it wont happen ever, it will just be harder then.
Either way, there is no good answer for this. Any type of protection you come up with will have its own flaws.
_________________
- Retired. |
|
| Back to top |
|
 |
NotReallySureWhatGoesHere Expert Cheater
Reputation: -1
Joined: 20 Feb 2012 Posts: 110
|
Posted: Tue May 22, 2012 10:44 am Post subject: |
|
|
| Slugsnack wrote: | | It's Just Josh wrote: | Using authentication is the way to go, or at least it always helps!
http://oauth.net/code/
Then on your server side, have some type of database MySQL, PostgreSQL, etc. and have it check for the username/password/id/etc. That's how I'd do it.
EDIT: If you want to lock an account I'd make a field in the database called "enabled" and set that to 0 or 1, also have your application check it. |
i assume by application you mean the server code. having the flag check on the client side is as good as not having one at all |
Whoops, I made a mistake
|
|
| Back to top |
|
 |
|