I would like to use QuickConnect for Simple Users but I do not know how to do it in a secured way. The problem is that I do not know how to distinguish users who are connected through PlayerIO.quickConnect.simpleConnect(...) from those connected by calling PlayerIO.connect(...)
I have noticed (or maybe I have missed something) that following two pieces of code gives the same Player on server side, however the second code does not require a password at all:
- Code: Select all
PlayerIO.quickConnect.simpleConnect(
stage,
GAME_ID,
"TestUser",
"SecretPassword",
this.onLogin,
this.onError
);
- Code: Select all
PlayerIO.connect(
stage,
GAME_ID,
"public",
"simpleTestUser",
null,
null,
onHack,
onError
);
I can easily imagine somebody who decompile my SWF and use PlayerIO.connect(...) to get unauthorized access.
I'm a new user of PlayerIO and there is a big chance that I have missed something or I'm doing something wrong. Please explain me how "QuickConnect for Simple Users" service should be used.
Thanks in advance
Limex Games