View Single Post
  #13  
Old 02-22-2007, 10:37 AM
Twinny Twinny is offline
My empire of dirt
Twinny's Avatar
Join Date: Mar 2006
Location: Australia
Posts: 2,422
Twinny is just really niceTwinny is just really nice
Send a message via AIM to Twinny
Quote:
Originally Posted by Kristi View Post
Any staff who has access to looking at that DB's flag could know the user's passwords! What if they use a password they use other places on the internet, like aim or email, or even worse... use their graal passwords! You know someone is going to do it, then some corrupt staff can go look for a random 8 character password! I would suggest using MD5 encryption on the serverside. However, the problem still lies with staff pretty much having access to scripts period. They could easily script something that intercepts that password on the clientside or serverside before it is encryped and compared in the first place. Variables on clientside are accessable no matter what way they are stored in a weapon. This can be very dangerous...
Good example of why i suggested Graal give scripters access to protected variables. Hidden/write protected variables are very handy for NPC's like this.

If you don't like GUI styled bank systems, look up mine (here).
Although i provided a textbased example, you could do Gui-based system and still use the player.<bankcommand> system. Depends on what you like.
Reply With Quote