[Logic_]

We will need to see some part of your log-in system to know some information about your variable and their naming and how it works. After-all, we're not magicians that can guess your code (Atleast not yet )

So after the wrong password "tries", you'll need to show the dialog where you ask the player to input the secret question's answer, and compare it. Of course, if you compare your answers with-in the script like this...

Код:

strcmp(inputtext, "dreamy gaming best", false)

and if you have other scripters then they are definitely going to know and it's not gonna stay secret anymore (RIP).
So the best thing you can do is, if you use Whirlpool or SHA256 (Supported natively in SA-MP Pawn), hash your password with one of them. You'll have

Код:

strcmp(inputtext, "e7e6000f8d148915d5fc68c3d53a06fe3e620db3383e460e00ba26e3c07ba58a48067347733c684c5e10c270ccca6fad2b771849e1fa62800b893061e21f48d0", false)

Quote:

Side note: "dreamy gaming best" is now hashed into "e7e6000f8d148915d5fc68c3d53a06fe3e620db3383e460e0 0ba26e3c07ba58a48067347733c684c5e10c270ccca6fad2b7 71849e1fa62800b893061e21f48d0"

instead of the fore-mentioned one, which of course hides the answer which was in plain text. You might think how it's safe, right? It's hashed, so it's not decrypt-able and can't be reversed (unless you use MD5 or some other shitty hashing technique).

Now only when some one updates your script can change your hash now. And if you want some more protection, then you can try to save it in your save file or your database (whatever you use). What more you can do is that you can host a free website and fetch the password from your website, which makes your security answer more secure and only change-able by you (good when you don't trust your fellow scripters or owners)

EDIT: You can use websites like this http://www.timestampgenerator.com/to...ool-generator/ for this technique.

Best Regards,