Quote:
Originally Posted by Limpkinw
My users are cheating the arcade simply by editing the url is there a way to prevent this?
|
This is fixed in the next version. In the meantime you could add a simple check like this, near the beginning of proarcade.php (must be after the $gameinfo query for this to work):
// security check for HTTP_GET
$strippedvar = substr($gameinfo[scorevar],1);
if (isset($_GET[thescore]) or isset($_GET[$strippedvar])) {
// output some message if desired, like:
echo "Cheater!\n\n";
exit;
}
That should prevent anybody from entering a score variable in the query string.