[cAMo]

Just wondering your views on this topic...

My script is setup to insert an entry into my MYSQL database for every connection (logging connection activity).

OnPlayerConnect - Logs account name, ip, time, type
OnPlayerDisconnect - Logs account name, ip, time, type

Are there any security risks by doing this (ie: server could crash -- assuming if it was to be attacked)?

Should I, instead, log connections after successful logins and only the disconnects from logged in accounts?


Thanks!

[juice.j]

As long as you don't have to worry much about traffic or overwhelmed CPU's there shouldn't be a problem. MySQL is quite ressource friendly.

However are there really any attacks resulting in many users connecting at the same time and if so, couldn't you just additionally create a little system blocking those?

[cAMo]

Not sure. I have witnessed, although rare and not recently (current version), loading attacks. Where someone sends in a massive amount of clients that load the server completely full.