[help] The global variable which the server and client have.

[Hyunsu_Oh]

Is this possible?

[karlis]

yes, with this example you will sync all values what is in serverside script to clientside, and dont do it for resources that have some data serverside that shouldnt be seen clinetside

--serverside
 
addEvent("onRequest",true)
addEventHandler("onRequest",getRootElement(),function()
local vars={}
local global=_G
for name,value in pairs(global) do
if type(value)=="string" or type(value)=="number" then --no need to send tables, userdatas, etc
        vars[name]=value
end
end
triggerClientEvent(getRootElement(),"setVars",getRootElement(),vars)
end)
 
--clientside
 
addEvent("setVars",true)
addEventHandler("setVars",getRootElement(),function(vars)
for key,value in pairs(vars)
if not key then
         key=value
else
outputDebugString("\'"..key.."\' variable is already clientside, so it wont be overwritten from server",2)
end
end
end)
 
function onResourceStart()
triggerServerEvent("onRequest",getRootElement())
  ...
end
 
addEventHandler("onClientResourceStart",getRootElement(),onResouceStart)

some1 say if something is wrong

[robhol]

I don't know if it's wrong, but the concept is idiotic. It's practically opening a door for hackers... and then putting glowing, flashing lights and a huge arrow towards it.

Data should be synced on demand, and the client should not be trusted for an uncorrupted version of it.

If your client can in any way change something that ends up on the server without validation, let alone actually being SYNCHRONIZED with the server without validation, you have made a huge mistake and a potential gaping security hole.

[Hyunsu_Oh]

Thanks!

[robhol]

No, no, no! Don't use it, ffs, it's a glaring security risk and a 12yo could hack it - use events. Transfer important data from server to client ONLY. Data on the client's side can be hacked.

[karlis]

i warned its for scripts that have nothing to hack on...he asked, i made some...

Transfer important data from server to client ONLY.

which exacly the example only does...(correct if im gettin' dumb)

besides this resource is definitely BAD idea for scripts that have some numbers/strings that shouldn't be viewed clientside(eg. keywords/passwords)

Edited May 11, 2011 by Guest

[qaisjp]

Sorry for the bump but keywords and passwords can be md5'ed using md5(string). So instead of

if guiGetText(passwordEdit) == getElementData(me, "pass") then

use

if md5(guiGetText(passwordEdit) == getElementData(me, "pass") then

[karlis]

Sorry for the bump but keywords and passwords can be md5'ed using md5(string). So instead of

if guiGetText(passwordEdit) == getElementData(me, "pass") then

use

if md5(guiGetText(passwordEdit) == getElementData(me, "pass") then

better still check it serverside.