Ban Serial Evade 10 times infront of me just 15 sec per bans

[solidsnake]

today i banned same guy with same ip same name same everything he was cheating i banned him over 10 times & he is still there he is too fast come again with different serial & i used ban ip same no effect

notice : his version 1.0.2 all time he doesnt change it

how can i stop him ?

[Gamesnert]

You could of course block MTA 1.0.2, or you could think of something to replace the (currently broken) serial system. Something like a hidden client-side XML file, in which some randomly generated serial is stored. On join, the serial would be checked if it's banned, and if it is, the script should kick the player. (I wouldn't advice auto-banning, as you'd end up with a list of so many IP / Serial bans that nobody can join anymore)

I really hope the username system will come online sooner or later. Preferably sooner. To evade a ban, they'd have to register another account. If only this would become time consuming, then it just wouldn't be worth joining the server just to get banned again.

[solidsnake]

You could of course block MTA 1.0.2, or you could think of something to replace the (currently broken) serial system. Something like a hidden client-side XML file, in which some randomly generated serial is stored. On join, the serial would be checked if it's banned

i didn't understand this & where is this XML file & what is called in resources

& from what you say i will tell you something he is coming with different serial & you said (the serial would be checked if it's banned) how can my server check if he is already connected with different serial ... sorry i didint understand

btw if i forced him to use 1.0.3 just like i read it somewhere well be this stopped - id otn know how to froce him something in admin resource ? -

sorry for all this question its just cuz this guy pissed me off

[Gamesnert]

sorry for all this question its just cuz this guy pissed me off

Shall I help you right now then?

Versionchecker

For the serial system, I mean that you should make your own. For example:

---------------------------------------------------------------------------------

- Make an SQLite table, specifically for storing serials.
- When the client joins, the resource should check if a specific file (for instance "dontopenthis.lol" as filename)
 
- If the file exists
- Check content (there should be some sort of uniquely generated serial key)
- Send the serial to the server for verification
 
- If banned or non-existant
	- Kick the player
- Else
	- Nothing
- Else
- Request the server for a new serial key
- Receive the key, and store it client-side in the same file as in the check
- Nothing else

---------------------------------------------------------------------------------

The SQLite only has to consist of 1 column: The serial. However, a "banned" column would also be useful in case you accidentally banned a serial which you weren't supposed to ban.

For more about the SQL part, I refer to the SQL pages on the wiki. I'm just listing one of the ways in which you could make it.

---------------------------------------------------------------------------------

Randomly generating serials shouldn't be hard. Basically you could do this:

local serial = ""
 
while serial == "" do -- As long as the serial is empty...
for i=1,10 do -- Repeat 10 times
	serial = serial .. string.char(math.random(97,122)) -- Randomly generate an alphabetic character
end
 
if serialExists(serial) then -- This should be a check, or function of your own. Just done to try and make it easier
	serial = "" -- Serial already exists, so let's reset the serial to empty so another serial is generated
end
end
 
addSerialToDatabase(serial)
sendSerialToClient(serial)

For a list of codes for string.char, I refer to the ASCII page on the wiki.

---------------------------------------------------------------------------------

Client-side, you can save it in an XML file. But, never save a serial in a .xml file.

Sounds confusing? Let me show what I mean with this:

local xmlFile = xmlCreateFile("something.jpg","getout") -- Create an xml file which we cloak as a jpg file

That's right. Saving XML data in an image file works. Just... Don't try opening it in image viewing applications, as you'd be wasting your time.

(note: Since jpg is mentioned in this example, it might be recommended to use another common extention, as people who read this topic otherwise know where it's saved)

---------------------------------------------------------------------------------

So that's a bit of hinting you how to do a small, simple serial system. Of course, this is not the best way of doing it, and not the safest way either. But it's just an example. Just note: Whatever you come up with, people will find a way to avoid it eventually. You can only slow down ban evaders, never stop them.

Just in case it gets cracked, you can do:

- Hiding copies of the serial file in different resources with different file names, to make sure it's harder to crack

- Having a login system which requires players to login

- Making it more difficult to obtain a serial key

- All other sorts of protection

- Making the client request which files to look at, so people can't look into the script and see which files in which resources are blocking them

- Cloaking the resource to look like it's something that belongs to a gamemode

- Hiding the same script in several resources

- Whatever you can come up with

** NOTE: Security measures, although sometimes required, can also affect normal users. Find a right balance to hurt normal users the least possible, yet have a way to block the cheaters / hackers **

[solidsnake]

- Having a login system which requires players to login

** NOTE: Security measures, although sometimes required, can also affect normal users. Find a right balance to hurt normal users the least possible, yet have a way to block the cheaters / hackers **

Very Very Thank you i do not how to say

and about login its cool if i linked the login accout with serial & the version & check if its same [account = serial + version] OK if its not equal banned

& about effect normal players i dont think so if its about ban by serial cuz i dont think so another player have same serial with the other who banned - as i think -

BTW im not the only one who having this problem many servers having this problem last these days i have never heared that can be bypass serial ban before

anyway thanks for help & i hope next version of MTA blocked this for servers security Play Fair Or Die

[robhol]

Been there...

... done that....

But it's a pretty poor reassurance as all one has to do is wipe the client-side resource cache.

[Dark Dragon]

well if you lock a door and leave the key next to it you are at least protected from those who don't see it.

[robhol]

well if you lock a door and leave the key next to it you are at least protected from those who don't see it.

Most blind people aren't in the burglary business. I will admit that a lot of people who tend to get banned are idiots, but then again, many aren't.

[Dark Dragon]

that's my point at least the not so smart cheaters are kept away.