Re: securing web based game

Hi Tomas,

> One thing with which i came up is to use unique session IDs and a secret
and
> generate "validation string", then sends it to server together with
points.
> Server uses same algorithm and compares received "validation string" from

IMHO if the algorithm is included in a client-side code, then this solution is equal to INSECURE, because it's a matter of [rather short] time for reversers to break it, unless you use some sophisticated methods and anti-* tricks, but it's just the waste of time.

> any other ideas?

let the server (instead of client) decide about the points

Just my 5 bolivars...
HTH
Best regards
Adam Received on Sun Dec 22 12:19:57 2002