39dll question(s)!

Posted by Mordi on Jan. 13, 2010, 8:14 a.m.

Hi

If you were to upload a file and some info to a server, how would you go about doing this with 39dll? Maybe someone knows of a good example about this?

xoxo,

Mordi

Comments

Juju 14 years, 10 months ago

Two solutions:

1) Use FTP on port 21

2) Make a server-side PHP uploading script and then communicate with the server on port 80 using HTTP.

Mordi 14 years, 10 months ago

I guess option number 2 is more secure, in that you can prevent packet-sniffing?

Juju 14 years, 10 months ago

You can always insert some basic cryptographical techniques if you're worried about number one. Number 2 is only a stop-gap solution for server not properly configured for FTP.

Castypher 14 years, 10 months ago

There's a method that many people use to upload and update highscore tables. 39DLL has a feature that allows you to access the FTP, as Juju said (hostname, website, username, password), and for the purpose of editing highscores, modified a text file that was stored somewhere in your online files.

As far as uploading files, it's a little touchy, and I don't think it works. But I believe with the assistance of 39DLL, and GMSQL (or something similar), you are actually able to edit a MySQL database by sending PHP commands. I've done this successfully about a year ago.

Keep in mind that since GM is fairly low-quality (the lowest of all game designing software, even RPG Maker), it handles this very slowly, and even updating a text file can take some time depending on your connection, and somewhat on your computer's performance.

You can use the database to store your information, which in your case sounds like it might be something such as character data.

If you're skilled in GM, 39DLL, PHP, and MySQL, this should be no problem to figure out. I'm sure someone on 64D is knowledgeable in all of those.

Arcalyth 14 years, 10 months ago

Don't use GMSQL (as per Kilin's suggestion). A PHP interface to your database is far more secure, as with GMSQL you are required to insert your MySQL username and password directly into your code, which is easily cracked.

With some kind of HTTP front end (php, python, whatever) then at least a cracker can only do what your script can do, and not drop your entire database (or possibly exploit any holes in MySQL itself)

Castypher 14 years, 10 months ago

Oh yes, that was the thing I forgot to point out. If someone gets into your editable, they have your FTP info along with your database info.

And that, my friend, would suck. Badly.