Forum BigDB (loadMyPlayerObject) : is'nt it unsecure?

Discussion and help relating to the PlayerIO database solution, BigDB.

(loadMyPlayerObject) : is'nt it unsecure?

Postby uterian » March 31st, 2013, 2:59 am

Hi,
in this linkhttp://playerio.com/documentation/bigdb/playerobject , it says clients can directly change their own data and can't load or read any other player's data. And the example change's users level from client side. But isn't it unsecure? if user hacks his/her own client and change his/her own level, money etc. this gonna be really insecure and a big problem.
Thanks
Uterian
uterian
 
Posts: 8
Joined: March 29th, 2013, 2:09 am

Re: (loadMyPlayerObject) : is'nt it unsecure?

Postby Henrik » March 31st, 2013, 6:59 pm

Yes, if you allow the client to modify BigDB objects, it's insecure.

If you want security, use the Multiplayer feature, and only allow changes to BigDB from serverside code. That way, you can validate whatever the clients send in before you modify it.
Henrik
.IO
 
Posts: 1880
Joined: January 4th, 2010, 1:53 pm

Re: (loadMyPlayerObject) : is'nt it unsecure?

Postby Benjaminsen » April 1st, 2013, 5:16 pm

You can also set the fullCreatorRights to set it such that only the players themself can modify their objects.
Benjaminsen
.IO
 
Posts: 1444
Joined: January 12th, 2010, 11:54 am
Location: Denmark


Return to BigDB