[Tutorial] Creating a simple register/save system using R41-2 - Printable Version

+- SA-MP Forums Archive (https://sampforum.blast.hk)
+-- Forum: SA-MP Scripting and Plugins (https://sampforum.blast.hk/forumdisplay.php?fid=8)
+--- Forum: Scripting Help (https://sampforum.blast.hk/forumdisplay.php?fid=12)
+---- Forum: Tutorials (https://sampforum.blast.hk/forumdisplay.php?fid=70)
+---- Thread: [Tutorial] Creating a simple register/save system using R41-2 (/showthread.php?tid=627222)

---

Re: Creating a simple register/save system using R41-2 - PaRking - 25.01.2017

Really ,guys its helped me

---

Re: Creating a simple register/save system using R41-2 - Quinncell - 25.01.2017

Like I said. No fucks given on my post. Even if it did help, like a lot of tutorials do, you learn the wrong thing, regardless if it worked or not.

---

Re: Creating a simple register/save system using R41-2 - Yaa - 25.01.2017

what wrrong on it ?

---

Re: Creating a simple register/save system using R41-2 - GhostHacker9 - 25.01.2017

Well you declared login attempts as static so there will be only one copy of that variable in stack. That means if one player fails in login attempt the variable value is 3 and would not be reset for another player so if next player logins by failing in one attempt would kick him by saying you failed login attempts 3 times. The solution is to change the declaration of logattempts to new instead of static.Also take consider of char arrays too instead of plain one (eg arrayname[size char]).

---

Re: Creating a simple register/save system using R41-2 - Lordzy - 25.01.2017

Writing a secure user system isn't easy because if it is, chances of security related risks are probably high unless you're either well experienced or if it was simply a copy-paste of a secured version. By saying it's not easy, I'm not implying that it's hard to code. But one who's developing should have a lot of patience and think for chances where such a system can be exploited or bypassed.

I'm suggesting people not to write their own (insecure) user system nor write any tutorials about them to mislead other beginners unless they're familiar with the security risks a user system can face.

Of course it may benefit beginners to learn to create their own user system, but why risk players' personal data with that? By this post I'm never trying to stop anyone from creating. But I'm trying to push others to know more about creating a secure login system.


I can say a lot of drawbacks from this tutorial if I've read it completely. Though, I'm done reading half of your insecure login-register system. Major things I'd note:

- You lack good explanation. I assume it's because you clearly are unsure of half of the things here.
- No array resetting included.
- No salting.

I'm not trying to completely criticize what you're doing here. I suggest you to know more first before proceeding.

---

Re: Creating a simple register/save system using R41-2 - Yaa - 25.01.2017

Thank you i got it

i know salting, and has using SHA256 isn't simple for newbies as title says this is simple register/save

some guys do not even know how to use mysql functions and you wanna show them SHA256 ?

this tuto is simple tuto just with using Whirlpool and for newbies



Tutorial Updated

---

Re: Creating a simple register/save system using R41-2 - Lordzy - 25.01.2017

The point is that newbies shouldn't risk writing a user system. About salting - It can be done with any hashing algorithm. I don't use the hash function provided by SAMP because the way it salts it's password is not revealed yet. So it'd be pointless to use it if you're developing any external source, say UCP for example that requires user's password for authentication.

EDIT : I just checked the wiki and it does include the way of how salt is concatenated to the password. But what I said can still be considered if your point of adding salt isn't at the end.

---

Re: Creating a simple register/save system using R41-2 - Yaa - 25.01.2017

whirlpool hash can be used in php too

http://php.net/manual/en/function.hash.php

SHA256 it's way more advenced and i don't even suggest to an newbie to use it

---

Re: Creating a simple register/save system using R41-2 - Lordzy - 25.01.2017

FYI - I never said not to use Whirlpool and yes, it's widely supported. You mentioned that you wouldn't suggest newbies to use SHA-256. The point of my posts here were that newbies shouldn't consider writing their own user system if they've no idea what all common risks they'll be leading with.

---

Re: Creating a simple register/save system using R41-2 - RyderX - 27.01.2017

Thanks Yaa it helped me a lot!

---

Re: Creating a simple register/save system using R41-2 - BiosMarcel - 27.01.2017

Worst suggestion ever ^^^

How is SHA advanced??

---

Re: Creating a simple register/save system using R41-2 - Vince - 27.01.2017

I'm getting sick and tired of this "for newbies" fallacy. If someone is a newbie then it is suddenly okay to teach them inferior methods?! And it's not just you, Yaa, so don't take it personally. I've seen others using it as well.

---

Re: Creating a simple register/save system using R41-2 - Yaa - 27.01.2017

well im fully agree but some times i think the newbies who joined samp forum (i was one of them) they don't know the pawn bases etc when they see SHA256 and salts and complied things etc i think they will leave it fast (#true_story)


i didn't ignore anyone i was playing all the day in iLearner server

---