SA-MP Forums Archive
Help in MySQL Login/Register System - Printable Version

+- SA-MP Forums Archive (https://sampforum.blast.hk)
+-- Forum: SA-MP Scripting and Plugins (https://sampforum.blast.hk/forumdisplay.php?fid=8)
+--- Forum: Scripting Help (https://sampforum.blast.hk/forumdisplay.php?fid=12)
+--- Thread: Help in MySQL Login/Register System (/showthread.php?tid=611418)


Help in MySQL Login/Register System - Ankon - 06.07.2016

Hey friends I am a noob scripter(just started).. So I would feel good if you helped me.
I have heard a lot about MySQL login/register systems and it feels good too..(good for big servers)

I have researched a lot and saw a lot of tutorials but none fit my needs.
I need some clear explanation on building a MySQL login/register system.
And I want it to be safe.
Basically I have heard a lot about editing values of a player and so and so in MySQL and I want my login/register system to be protected against it.
I also want the system(the login part) to give players a number of 10 attempts to login before he is kicked(not banned)... Because I want to protect it from brute force attacks and such.

I would also love if anyone gave some information about protection against MySQL injections.

So the conclusion:
A clearly explained MySQL login/register system(code with explanations(I am a noob)) with 10 attempts for login and then a kick, protection against value edits and protection against injections(if you know what I mean.)...

Thanks
Would be great if anyone helped...

Re: Help in MySQL Login/Register System - iKarim - 06.07.2016

Hmmmm, just ******..

https://sampforum.blast.hk/showthread.php?tid=56564
https://sampforum.blast.hk/showthread.php?tid=574714
https://en.wikipedia.org/wiki/SQL_injection
https://en.wikipedia.org/wiki/MySQL_AB

Re: Help in MySQL Login/Register System - CodeStyle175 - 06.07.2016

rly what the fuck are you talking about, register/login system is so simple to make and well safety also.
for safety just use mysql_format it wont let player enter harmful sql commands, like entering
DROP DATABASE samp and so one.

Re: Help in MySQL Login/Register System - Ankon - 06.07.2016

Quote:
Originally Posted by PawnHunter
View Post
Thanks a lot friend..But still a problem..
I visited OverHaul's tutorial and it said..

"Ideally, you would add a check for the amount of times the player has tried to log in so they can't float the server with login request to guess someone's password."

But there is nowhere I see it on the script..

Re: Help in MySQL Login/Register System - Luicy. - 06.07.2016

Quote:
Originally Posted by Ankon
View Post
Thanks a lot friend..But still a problem..
I visited OverHaul's tutorial and it said..

"Ideally, you would add a check for the amount of times the player has tried to log in so they can't float the server with login request to guess someone's password."

But there is nowhere I see it on the script..
Outside any callback:
PHP Code:
new loginAttempts[MAX_PLAYERS]; 
OnPlayerConnect:
PHP Code:
loginAttempts[playerid] = 0; 
In dialog response->login->wrong password
PHP Code:
loginAttempts[playerid]++;
if(loginAttempts[playerid] > 9)
   Kick(playerid); 


Re: Help in MySQL Login/Register System - Ankon - 25.07.2016

Thanks Meller..
REP+ to you..