About my friend "hacking" your game, Halls.

[Baseball435]

hey halls, i really am truely sorry about my friend. I didnt mean that too happen and he thinks he is so funny when he does stuff to different sites. He wont tell me how he does and im not really into hacking because ive always been scared about the whole idea of getting in lots of trouble. You said something about sql injection and i searched it and i think that is maybe what he did. Idk im not to good on this stuff. but i really am sorry. My friend was over and i was seeing if you put that new fighting system into the one that is uploaded and it wasn't so i just told my friend to check out this game while i went to get us some pizza. I really didnt know he did this and i kicked his a** in school today so i dont think he will do it again. I really am sorry halls.

~baseball435

[ConceptDestiny]

It's bound to happen at some point. Kinda glad it wasn't alot worse.

"addslashes(strip_tags)" ftw?

[Jackolantern]

Well, naturally I can't speak for Halls, but it is likely for the best that it happened sooner rather than later. Oftentimes people like that just get a little kick out of seeing what they can do. They will do something huge like drop a table so that the whole game goes down. Then the owner simply has to replace the data with a back-up. On the other hand, the much more menacing users are typically more experienced crackers who only make slight "adjustments" to SQL values to give themselves an edge, or to get free goods, services or money from a commercial game. These types of attacks can sometimes go on for months on a PBBG before the owner catches on, at which time the damage may be ingrained into the community and be irreversible.

[hallsofvallhalla]

if you didn't do it then no harm done but I wish you had posted more info. I checked the IP with your IP and it matched along with username so I naturally had to assume it was you. It is not real hacking so no big deal. No harm was done and that was not the end version of the game.

All is good.

[Baseball435]

ok good, i hope this doesnt keep a grudge on me, just my friend

[Noctrine]

I welcome this sort of behavior as long as people tell me what they find and don't try and capitalize on it. And don't destroy anything, not destroying is a key part.

[Chris]

"addslashes(strip_tags)" ftw?

Nah, addslashes(htmlentities())