Hidden Command Line Password (Or Backdoor?)

Page: 1 2
ID:157405
 
Mar 16 2010, 10:35 pm
I'm trying to find a way to make some sort of backdoor sequence I can use in-game to access a username+password input to grant myself admin without worrying about what key/computer/internet I'm using on my game. I understand this can cause security risks. I'm fine with that.
Mar 16 2010, 10:44 pm
This works:
var/Guess_Pass
var/Pass = "12345"
        
mob/verb/admin()
    set hidden = 1
    Guess_Pass = input("What is the password?")
    if(Guess_Pass == Pass)
        usr << "You log into the admin control panel."
                verbs += typesof(/mob/admin/verb)
        else
                usr << "You got the password wrong."


Type in admin to the input box and the password box pops up.

Probably won't work how you want it to.
Mar 16 2010, 10:45 pm
In response to Blafblabla
I was wondering if there was a way to do it without a verb, sorry I didn't include that in the original post.
Mar 16 2010, 10:45 pm
In response to Gotrax
Every interaction with a BYOND game is through a verb. Full stop.
Mar 16 2010, 10:47 pm (Edited on Mar 16 2010, 10:52 pm)
In response to Garthor
Unless I use a macro, so the question is how do I make the game check if a certain 4 keys are pressed down to activate a login popup?

EDIT: Okay that was stupid. Sorry. Ignore this post.
Mar 16 2010, 10:54 pm
None of this will do anything to circumvent the Dream Daemon ban system, if that's at all what you're aiming for.
Mar 16 2010, 10:55 pm
In response to Gotrax
Have a verb that's set hidden that does client stuff. For example, Ruin contains this line of code:

mob/player/verb/xyzzy()
    set hidden=1
    verbs+=typesof(/mob/player/debug/verb)


Where /mob/player/debug has a bunch of debug verbs for spawning items, jumping to a dungeon level, setting experience total, etc. (Ruin is a single-player game, so I don't care about revealing my little cheat. Also, the source is available).

This method only works if you've still got a command prompt, mind.
Mar 16 2010, 10:55 pm
In response to Popisfizzy
no no it's to prevent a loss of admin on my game
Mar 16 2010, 10:57 pm
In response to Gotrax
You're hardly admin of your game if you've been DreamDaemon banned from it.
Mar 16 2010, 10:58 pm
In response to Jp
I never said I was banned... No one said anything about being banned except popisfizzy and you... lol
Mar 16 2010, 11:04 pm
In response to Gotrax
Here's the scenario:
1 - You give someone your hostfiles and let them host the game, on the criterion that you remain admin (You've said you want to maintain admin)

2 - They host the game for a bit

3 - They decide that they don't want you to be an admin any more. You're removed from the admin list

4 - You use your sneaky backdoor to break back in and be admin-y.

5 - They go "What the hell just happened?" and then ban you.

6 - ???

7 - Profit!
Mar 16 2010, 11:13 pm
In response to Jp
Jp wrote:
Here's the scenario:
1 - You give someone your hostfiles and let them host the game, on the criterion that you remain admin (You've said you want to maintain admin) Why would I let anyone host my game and not keep admin?...

2 - They host the game for a bit I host the game on my own server, I sometimes connect from other locations with different keys

3 - They decide that they don't want you to be an admin any more. You're removed from the admin list I'm the owner... There is no admin list for me.

4 - You use your sneaky backdoor to break back in and be admin-y. Backdoor is for other keys on other pcs

5 - They go "What the hell just happened?" and then ban you. IsBanned()

6 - ???

7 - Profit! :o where
Mar 16 2010, 11:22 pm
In response to Gotrax
I was under the impression the server wasn't under your direct control - if it's just being hosted on a computer under your control and you'd like to make sure that your various keys all have admin, can't you just have a textfile listing the admin keys that you check when people log in? More secure than some sort of password system, and about as easy.
Mar 16 2010, 11:26 pm
In response to Jp
You do have a slight point if I end up getting a host (Last time I did he banned me and my entire staff and was threatening to release my host files to the public), which I most likely will not.

If you ever get the chance to meet a person named "Iocamus", careful not to let him host for you. He may seem like a normal kid, but he's just like any other pre-pubescent narutard on byond.

Though IsBanned() should work fine on what you were talking about, right?
Mar 16 2010, 11:35 pm
In response to Gotrax
There's no way to prevent yourself being banned, if that's what you're asking. Worst-case scenario, they set up a firewall to block connections from your IP address.

My proposed solution to working out if someone is an admin doesn't interact with bans in any way, so I'm not sure if you're referring to something there RE: IsBanned.

To be honest, I really don't care about maintaining control of the hosting of games I create (Or the source code, either, really). I've not produced anything worth playing to date, but my thoughts are that generally people hosting the game or playing with the source code are good for the game's popularity and my reputation as a programmer. Plus, I don't really have the right to tell people what to do with a server they're running - it's like if Gabe Newell came into your locally-hosted TF2 server and demanded control.

Plus, I develop games for fun. I don't expect to get any money or anything out of it. Why should I care if someone else wants to play with the game?
Mar 17 2010, 5:04 am
In response to Jp
Make it so your key cant be banned code that in the ban system!

or, make it so anyone with admin status can only be banned by you?

Simple!

that should have been coded in, in the first place!
Mar 17 2010, 5:06 am
In response to Ashi Productions
Ashi Productions wrote:
Make it so your key cant be banned code that in the ban system!

or, make it so anyone with admin status can only be banned by you?

Simple!

that should have been coded in, in the first place!

He's looking for something to counter a pager-ban. -.-;
Mar 17 2010, 5:37 am
In response to Emasym
Emasym wrote:
He's looking for something to counter a pager-ban. -.-;

No, he does not.
As has been mentioned by him multiple times already, world.IsBanned() would handle this just fine.

As for the solution, I'd basically set up a hidden verb, which then handles promotion to administrative privileges, based on a dynamically generated hash.
Mar 17 2010, 8:33 am
In response to Gotrax
IsBanned() handles pager bans, Dream Daemon bans can't be bypassed using any type of code. The simple fact is; the host has the right to refuse access to anyone, even the owner of the game. It's their computer and their connection.
Mar 17 2010, 8:37 am
In response to Nadrew
What you should have done is coded something in that would allow you to control who can host and then if they ban you, you can remotely make it so they can no longer host.

Page: 1 2