Graal Forums - TServerPlayer.ipaddress

Page 1 of 2

Show 40 post(s) from this thread on one page

Graal Forums (https://forums.graalonline.com/forums/index.php)

- Future Improvements (https://forums.graalonline.com/forums/forumdisplay.php?f=10)

- - TServerPlayer.ipaddress (https://forums.graalonline.com/forums/showthread.php?t=134256338)

cbk1994

10-07-2009 01:26 AM

TServerPlayer.ipaddress

Please add it to all servers. It's already enabled on certain ones (Zone, etc).

It seems like this has been brought up dozens of times, yet there are still no good arguments for not enabling it. Privacy is not an issue with IPs.

DustyPorViva

10-07-2009 01:27 AM

Stefan doesn't want IP addresses being accessible by script! :o

cbk1994

10-07-2009 01:29 AM

Quote:

Originally Posted by DustyPorViva (Post 1528108)

Stefan doesn't want IP addresses being accessible by script! :o

He didn't seem to mind adding it to servers where it suited him.

oo_jazz_oo

10-07-2009 01:37 AM

Quote:

Originally Posted by DustyPorViva (Post 1528108)

Stefan doesn't want IP addresses being accessible by script! :o

Its accessible by script now...Inverness had a method with accessing the accounts folder, etc.

But, the issue has been brought up before, and the reason is always, "player privacy".

Even though any low level staff with an rc can open up a players attributes, and like magic...they have their ip address.

Admins

10-07-2009 01:39 AM

Why is privacy not an issue? The problem is that enabling this makes it possible to automate ip-checks or sending the ip somewhere else by script, which cannot be tolerated. The ips are accessible on gold servers because they are supervised by me.

Rufus

10-07-2009 01:41 AM

Playerworld renting is open to anyone who has the money. I don't really understand why IP's are considered something private in that respect, because anyone could rent a server and get you to log onto their server if they really wanted to. You should have a little faith in the Classic-tab Playerworld staff if anything.

cbk1994

10-07-2009 01:45 AM

Quote:

Originally Posted by Stefan (Post 1528117)

What do you mean by ip-checks? Checking for banned accounts? Checking where people live?

And why would we need to send the IP elsewhere by script? You do realize that virtually every single website you go to (including these forums) logs your IP? IPs are also not personal. At any given time (depending on your type of connection), there are dozens of other people with your exact same IP address.

At the very least, a MD5 hash should be provided for IPs.

It's not reasonable to omit a useful feature like IPs because of some unwarranted fear that some angry playerworld staff with an Ak47 is going to show up and knock on the door of every house within a 100 mile radius of where the IP supposedly originates.

DustyPorViva

10-07-2009 01:46 AM

Anyone who can script can get the IP anyways, it's just a matter of GDT enforcing rules about what people do with them. So either they script someone to grab the IP with a script in a productive way and GDT comes on and tells them not to, or they use player.ipaddress to send off IP's to an external site, and GDT comes on and tells them not to. What's the difference?

napo_p2p

10-07-2009 02:26 AM

Quote:

Originally Posted by cbk1994 (Post 1528120)

At the very least, a MD5 hash should be provided for IPs.

Exactly. This would be perfect because the main reason we would need a player's IP address is to compare it with other players.

There is really no privacy issue if the IPs are encrypted or hashed. Technically, someone could brute force it, but if they're willing to do that just to get your IP, there are much easier ways.

oo_jazz_oo

10-07-2009 02:50 AM

If you really wanted to, you could just have a link to a web page you have set up, and save that users ip to a database...thats such a simple script, even I could do it...and I only know basic php/mysql.

No matter what, there are always ways to find ips.
When trasnferring files on any instant messenger, your ip is avaiable if you try hard enough to find it.

And I don't know if it would be useful, but using your ip to locate your city or region, and let you know which players are near you...I know a lot of sites that use that...just for fun i guess, so you can see what players live near you.

But, it could also be used for alot of good things...

cbk1994

10-07-2009 02:54 AM

Quote:

Originally Posted by oo_jazz_oo (Post 1528131)

The "players near you" is exactly the kind of thing that Stefan is worried about, I think, even if it was an "opt-in" thing.

And yes, I've gotten IPs before via GS2 and PHP with about 10 lines when the two are combined. It's not difficult, but not ideal (since it happens to be breaking a few rules).

oo_jazz_oo

10-07-2009 02:58 AM

I'm just saying, no matter what...there are ways to get an ip address. :P

But about the "players near you". Has he never read masses on servers?

Countless times, I've seen. "Someone call me I'm bored!!! My number: xxx-xxxx"
People pretty much announce their locations anyways...

But, IP addresses are not precise....at one point, my ip said I live somewhere in Georgia...which is very very wrong...

Edit: Right now, my ip address is about 100-ish miles off. =P
So, if anyone went to the location my address points to...they would find themselves somewhere in San Diego, California. Which is not even close to my city.

cbk1994

10-07-2009 03:02 AM

Quote:

Originally Posted by oo_jazz_oo (Post 1528134)

I agree with you completely, but I'd prefer to freak out Stefan as little as possible so he'd more more willing to flip the switch for IP addresses.

DustyPorViva

10-07-2009 03:27 AM

Or you can just load the accounts file of the player.

Programmer

10-07-2009 03:40 AM

I agree that the IP address of the player should be visible to all developers. IP addresses can be accessed by /open and /openrights. IPs are in no way private. In fact, here's mine: 71.200.219.141. IPs are used as identifiers to a computer, and nothing more. Sure, they can be traced to a certain area, with a small amount of precision, but it's nothing to worry about. My IP traces to a spot that's not even close to me.

Personally, I would use IP checks to determine if a user is multilogging on my server, or simply evading jail time or ban time. Of course, you could always check using /open, but I believe that script access would be very useful.

I agree with the others that if you are too paranoid about adding the IP address in its raw state, then simply encrypt it. MD5 is irreversible, so why not MD5-hash it? Simple solution.

fowlplay4

10-07-2009 03:53 AM

Well there's a computerfirstlogin variable, which currently works for detecting multi-clienting.

As seen here: http://forums.graalonline.com/forums...ad.php?t=87901

I'd recommend adding a ipfirstlogin variable, that way we can still determine multi-pc'ing, and the player's will still have their privacy.

Admins

10-07-2009 05:33 PM

I've added TServerPlayer.ipaddresshash, it will be available when I upload the npcserver (probably in a few days).

Chompy

10-07-2009 05:55 PM

Quote:

Originally Posted by Stefan (Post 1528212)

I've added TServerPlayer.ipaddresshash, it will be available when I upload the npcserver (probably in a few days).

:D Nice! ^^

Programmer

10-07-2009 06:41 PM

Quote:

Originally Posted by Stefan (Post 1528212)

I've added TServerPlayer.ipaddresshash, it will be available when I upload the npcserver (probably in a few days).

Finally, after all this time bickering. Thanks Stefan.

Loriel

10-07-2009 08:33 PM

Quote:

Originally Posted by Programmer (Post 1528142)

Personally, I would use IP checks to determine if a user is multilogging on my server

IP addresses do not work like that

Skyld

10-07-2009 09:59 PM

Quote:

Originally Posted by fowlplay4 (Post 1528144)

I'd recommend adding a ipfirstlogin variable, that way we can still determine multi-pc'ing, and the player's will still have their privacy.

It would be essentially useless, because it would be accurate for someone with a static IP and then inaccurate for someone with a dynamic IP. Some people get a different IP address every time they connect to the internet, and some people get a different IP address in a completely different IP block (for example, BT users in the UK can get 217.*.*.* addresses or 86.*.*.* addresses or 81.*.*.* addresses etc).

Quote:

Originally Posted by Programmer

Personally, I would use IP checks to determine if a user is multilogging on my server, or simply evading jail time or ban time. Of course, you could always check using /open, but I believe that script access would be very useful.

An IP address is shared with everyone who is behind a certain NAT, so two different players on two different computers in one house would have the same external IP address, which is why it is bad to try and enforce jails/bans or such using IP addresses.

salesman

10-08-2009 12:00 AM

player.pcid???

Chompy

10-08-2009 12:22 AM

Quote:

Originally Posted by salesman (Post 1528288)

player.pcid???

Quote:

Originally Posted by fowlplay4 (Post 1528144)

(: I guess something like that above will work in the meanwhile :p

cbk1994

10-08-2009 12:29 AM

Quote:

Originally Posted by salesman (Post 1528288)

player.pcid???

TServerPlayer.computerid - integer (read only) - only accessible on authorized servers

Because we can also abuse their PCID.

Inverness

10-08-2009 05:30 AM

Quote:

Originally Posted by cbk1994 (Post 1528292)

Because we can also abuse their PCID.

I'm choking on all of the sarcasm in this thread.

salesman

10-30-2009 04:28 AM

Has this been added yet? It doesn't seem to be working...

PHP Code:


		
			
temp.pl = findPlayer("salesman");

echo(pl.ipaddresshash);

cbk1994

10-30-2009 04:32 AM

Quote:

Originally Posted by salesman (Post 1535013)

Has this been added yet? It doesn't seem to be working...

PHP Code:


		
			
temp.pl = findPlayer("salesman");

echo(pl.ipaddresshash);

Nope. I mentioned it to Stefan a few days ago and he said he'd get to it... eventually.

Admins

10-30-2009 01:18 PM

It should work on Zodiac, Classic and private playerworlds already.

Rufus

10-30-2009 01:19 PM

I guess you didn't add global guild messaging at the same time then :(

fowlplay4

10-30-2009 04:44 PM

Workz

PHP Code:


		
			
function onCreated() {

  temp.pl = new TServerPlayer("fowlplay4");

  echo(temp.pl.ipaddresshash);

}

Echos "d3dd73d0b7d9cf793b375616490c86dd"

Cubes

10-30-2009 05:34 PM

Can you make it so you can't view the ip address via script only compare it?

DustyPorViva

10-30-2009 05:38 PM

That's what the hash is for.

Cubes

10-30-2009 05:41 PM

oh i didnt read anything after stefans first post

salesman

10-30-2009 05:53 PM

Quote:

Originally Posted by Stefan (Post 1535062)

It should work on Zodiac, Classic and private playerworlds already.

When will it work on Era?

DustyPorViva

10-30-2009 05:55 PM

Quote:

Originally Posted by salesman (Post 1535112)

When will it work on Era?

Neva!!!!

salesman

10-30-2009 06:42 PM

:cry:

Admins

10-30-2009 10:40 PM

Unholy Nation and Era will be moved to a faster new computer this weekend, then we can also upgrade the npcserver :)

cbk1994

10-31-2009 02:09 AM

Quote:

Originally Posted by Stefan (Post 1535191)

Era will be moved to a faster new computer this weekend, then we can also upgrade the npcserver :)

salesman

10-31-2009 04:23 AM

Quote:

Originally Posted by Stefan (Post 1535191)

Unholy Nation and Era will be moved to a faster new computer this weekend, then we can also upgrade the npcserver :)

hell yeah

WhiteDragon

10-31-2009 07:33 AM

Quote:

Originally Posted by Stefan (Post 1535191)

new computer

I thought you were in a tight situation for money?

Well, at least it's going towards something for Graal.

All times are GMT +2. The time now is 08:15 AM.

Page 1 of 2

Show 40 post(s) from this thread on one page