ID:132587
 
If this in the wrong section, my apologies. If this was already posted before, again, my apologies.

How easy is it to obtain the password to change HUB standings (medals and stuff?) I'm asking this because today on a game, a player has obtained the hub password and deleted all of the standings (over 100 of them to my knowledge.) Any ways to prevent this in the future?
I don't see any hub entries under your account so I'm not sure which one you're referring to, but basically the hub password should not be easy to get. However, if you use a hub password manually in your game it should be obfuscated. For instance, you would want to split it up into sections or something like that.

One common security mistake people do make is calling SetMedal() and explicitly putting in the hub_password instead of relying on the default value. You should never have to use the hub password argument to these procs unless you're trying to access a completely different hub entry. If this is the case, then I strongly advise you to remove the hub path and password arguments from SetMedal(), SetScores(), etc. If your hub password is only specified in the line that sets world.hub_password, then it will be impossible for anyone to get access to it.

Lummox JR
In response to Lummox JR
The game was EternalDuelistSoul's, not mine, but I'll show this to him (since he is currently asleep.)

Somebody mentioned that the person that changed all the standings used a memory editor? Any idea what this is exactly?