Player IP Ranges
 

Stefan or Unixmad.

I would like to suggest a feature, thatr would allow players to set their IP Range, so that unless the IP range is right, account can not log in (IP Range will obiusly be possible to change through eitehr software or site or Account Admin)

Pretty good idea to help keep people using their own accounts. But still wouldn't keep a lot of people from sharing. ie AOL players, they could only set the IP range to 172.*.*.* and that would let any aol user on it. But its still a pretty good idea to keep people from sharing and limits "hacked" accounts.

Can somebody move this thread to Graal Main Forum?

It wouldn't keep anyone from sharing. You could just set your IP range to *.*.*.*

Much less, that wouldn't necessarily help ward out people from stealing passwords. They could change the address to their own address instead of the owner's address.

Actually this belongs in Future Improvements.

What would happen if your IP changes though? Like you set it to one thing, and then you have an IP change, and you can no longer get into your own account? I think it's too much safety if you ask me.

If you just change your pass often (like a couple times a month) and you don't do stupid stuff like download trainers, then you should be fine.

I like that idea as well, would give an increased sense of security if nothing else. There actually is a global IP range, from what I heard, but it is only useful if you have an adminlevel greater than 0.

If your IP is not static, you can still set the first part which generally stays the same unless you change your ISP. I think a good idea would to be able to reset your IP range like resetting your password, meaning it would send out an e-mail with a reset link.

Hes correct. Any aol user can loggin to RC with the ip range of 172.*.*.* , only because the rest change after you reboot your computer, therefore anyone with AOL can login too your account if hacked, shared (illegal).. And so on..
:)

If a person was able to change it themselves...then anyone that gains access to their account can change it.

There are over 700 people who play Graal...I don't know if the Accounts Admin has time to change IPs for those 700+ players.

Out of topic, but when you stated "I dont know if the accounts admin has time to change IPs for those 700+ players." where you directing that too the future accounts admin, were u promoted, or what? Dont you mean yourself?
:megaeek:

This, like all security measures on Graal, should be optional.

I still am Accounts Admin. I meant I don't like the idea. I know how hard it is to answer 30 emails in a day...imagine how long it would take to set 700 accounts.

This might be off topic, well not really. But.. Isnt changing peoples account cool? I mean the way It sounds if I was doing it, I'd love my job.
:cool:

Maybe for the first 5 accounts but after that you begin to lose interest.

IP Ranges on players would be nothing but problems, as mentioned by Lyndzey, the mass amount of work that would have to be done, and keep being done, as players switch from 56k to Cable, maybe vice versa (God Forbid.) etc... And, as someone mentioned (I think? Kind of tired) IP's can be "stolen" or "spoofed". I'm not going into detail or anything, but Comcast/Attbi for one... It'd be a game for some people, like stealing passwords is now. And then the ever-obvious Dynamic IP's that will change whenever someone would restart their computer, or, just a simple renew/release. If everyone had static ip's then, it would work, but the vast majority of the public have dynamic ip's... So i'll put my money down, this will not be implemented ;)

I can see problems already, what if you were hacked and someone changed your IP to his IP and you cannot log on? Where would this IP be set? How? Would a global adminastrator need to set it?

Then there is the question, What if my ISP changes?

Kinda off topic, like usual but whats the point of this whole thread? People can always hack you, maby "hack you" and not only that alot of people will have problems because of there ISP and other things. I dont think It would even work out.
:megaeek:

::edit:: - I didnt mean to quote ur thread :P I was just relating too the whole thread.. k? k ::edit::

That would be the only safe way.

There are 4 levels 4s. Stefan, unixmad, Tyhm, and myself. Stefan and unixmad don't have the time and Tyhm and I cannot do this all by ourselves. Also, we have to keep the amount of level 4 RCs down to about this number so another Nemesis doesn't happen...

Well, I know this will not be put into effect because of, well just read the previous posts ^_^ But, if it was, hypothetically speaking, It would be another row in the database of accounts, they could just code a program, to go into the database, take the last ip thing that is all ready in the game, and have it copy over to the player ip range, but that can also cause problems for people who use routers, proxies, etc... So that'd still, be a lot of work...

Maybe make it so that you set your IP at your house before you even long on to graal, wouldnt that work?

Only the owner of the account should have the password to the account...so therefore there should be no reason to have this...People just dont "crack" the password on someones account...they have to be stupid enough to DL a trainer or give it out...Therefore it is their own fault :D

Koni, I can't change my pass a lot, I tried, but considering my global and my Debug/SDev account have ident passes, it would make it more difficult for me. I just set my comp up with a firewall and it doesn't save passes, I finally memorized this one, and almost got my spare acc memorized.

I would rather a scripting command be able to check IP's. Then you can have it warp etc. if the IP doesn't match. So many things,t hat's what I wanted.
if (actionplayeronline)
{ tokenize #i; //#i would be the IP;
if (!strequals(#p(0),#I(clientr.ip,0)))
{ setlevel2 bad_ip.nw,30,30;}
}
Something like that but better, I just made that quickly.
---Shifter

Arg, sorry for double posting, but this is on a dif thing someone posted here.

Graal has many insecurities, and yes you could have it copy over the old IP to your IP, but then you could also do a variety of things.
I THEORETICALLY could do it with RC where it would check the database, and instead of setting the string with the password you typed ina nd checking with the real password, it would take the real password and set it to the string, and then compare. And of course that would have the correct pass. But considering that no one has had the intelligence or the means to do so, then it isn't a big deal. What I'm talking is complicated coding and decoding, so 99% of people would never have a chance.
---Shifter

The problem with it being an npc, those *****s out there that get their passes stolen using trainers that can insert npc's into levels. Could they not counter-act the npc? Remove it even?