Just some questions about security:
I rewrote most of the tetris.php file, but without using the security check and whatnot. Right now I have my code just checking the referrer, so (in theory) the only way that somebody could cheat is if they spoofed the referrer, like by doing a manual HTTP request from a web server through telnet or something.
Are there other known ways of cheating that need to be addressed?
I have the permission code set up so that an admin can just choose which groups they want to have access to the games via the admin panel.
|