Jump to content

FileDelete safe?


Gallagher

Recommended Posts

fileDelete should no longer used for the mentioned purpose since cache option in meta is available.
cache: When the script file type is "client", this setting controls whether the file is saved on the clients' hard drive. Default is "true". Using "false" will mean the file is not saved.

https://wiki.multitheftauto.com/wiki/Meta.xml

so is right?

    "panel" author="rex" version="1.3" type="script" /> 
    

Link to comment

As long as you have cache set to false, you'll do just fine. There is an exception though, which requires more than enough knowledge in memory addressing and access locations, which isn't really 5-minute-book type of thing.

Just encrypt the code and make some small piece of code in that file that checks whether the script is ran on the real server, check for the server information for example, something that recognizes misuse. It doesn't even have to be server name, but if a variable isn't initialized then just rape the whole client till they have to Alt-F4.

Link to comment
As long as you have cache set to false, you'll do just fine. There is an exception though, which requires more than enough knowledge in memory addressing and access locations, which isn't really 5-minute-book type of thing.

Just encrypt the code and make some small piece of code in that file that checks whether the script is ran on the real server, check for the server information for example, something that recognizes misuse. It doesn't even have to be server name, but if a variable isn't initialized then just rape the whole client till they have to Alt-F4.

You can download and use a packet sniffer tool in just a few seconds, since http downloads are not encrypted. The best way to make sure that nobody steals your scripts is by making a custom downloader script that sends client scripts using triggerClientEvent since packets are then encrypted, and do loadstring on the code instead of saving onto a file.

Link to comment
  • Moderators
As long as you have cache set to false, you'll do just fine. There is an exception though, which requires more than enough knowledge in memory addressing and access locations, which isn't really 5-minute-book type of thing.

Just encrypt the code and make some small piece of code in that file that checks whether the script is ran on the real server, check for the server information for example, something that recognizes misuse. It doesn't even have to be server name, but if a variable isn't initialized then just rape the whole client till they have to Alt-F4.

You can download and use a packet sniffer tool in just a few seconds, since http downloads are not encrypted. The best way to make sure that nobody steals your scripts is by making a custom downloader script that sends client scripts using triggerClientEvent since packets are then encrypted, and do loadstring on the code instead of saving onto a file.

I'm agree, see this post:

viewtopic.php?f=108&t=29990#p337791

Link to comment

Most people on MTA are too simple minded to know how a packet sniffer works, and if someone knows how to utilize a packet sniffer they would be smart enough to script their own scripts.

Here's an example of how I protect my client-sided scripts though, it's basically the same as what the attribute 'cache' does.

  

    "Jesseunit" type="script" version="1.0.0" /> 
  
    

Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...