[SOLVED] my site cash idea

well as i told u already ange i wanted to create a forum cash system for forum stores and so on .. so when you make post or new topics and such it would add cash to a profile field well as awesome as it would be i think im gonna have to give up on the idea because people could turn off script and change profile field or they could just send the post script in scratchpad and then boom they hacked there cash so im pretty much out of ideas.. unless you can think of a more secure way.. only other thing i can think of would be to ur math and letters to encypt the cash value and decyrpit it but they could still use dev tools to get the script and figure it out .. witch i dought on 90% of these forum people will be able to get past that but still

Yeah, the only problem with doing this stuff by JavaScript is that security-wise, it's crackable by someone with the same knowledge. Take the database I'm developing for example, if you know how to use the db methods, you can pretty much add to the tables or edit your own rows.

I know that you can use hex for numbers, for example :

x30 = 0

and

x31 = 1

We can convert these to a number and add to it : Number('\x31\x30') + 10 = 20

That seems pretty useless, but it can be useful in some places.. I do have an idea, as long as everything is contained within the local scope, there shouldn't be any problems. If they have JS disabled, you still got the noscript fallback, so they wouldn't be able to manage editing it. How were you planning to use it, like spending-wise ?

probably like a html store page

and when they buy somthing it make a post in a admin topic . so the admin knows and can give them what ever they payed for and it will automatically take cash away from profile field

So when someone posts, do you get the field value, add to it, and then post it ? Now that I think about it, if anyone knows how to use AJAX, they could just post a new value to their field. I guess the only thing you could do, would be to punish the person who hacked their money. There's not a lot of people who would do that, but that's the only thing I can think of. If it's editable by the user, there isn't much you can do.

thats y i was saying encrypt and decrypt the value  so instead of showing there money in profile field it would be like 5lkj534kl5jlk5lk witch could hidden and mean $20.00 and i just show the decrypted value on profile .. so even if they used ajax they would have to have the encrypt and decrypt code to know what value to post of it wouldn't work

I may not be following this correctly but why not just use the standard points system and re name it? Then only Admins can edit the fields. Unlees your experimenting with a new project, in which case never mind.

_Twisted_Mods_ wrote:thats y i was saying encrypt and decrypt the value  so instead of showing there money in profile field it would be like 5lkj534kl5jlk5lk witch could hidden and mean $20.00 and i just show the decrypted value on profile .. so even if they used ajax they would have to have the encrypt and decrypt code to know what value to post of it wouldn't work

That could work, but I've never played with encryption before.. You could also store the value has hex :

Code:

var value = 0x0000FF;
value += 0x000001

If it's a string, just convert it to a number :

Code:

Number('0x0000FF')

I'm sure you'll think of something, like you always do.

brandon im wanting to make a new cash system kinda like the points but you will be able to donate people your cash.. that way will make it easier to have shops like for graphics, custom forum names and w/e else you wanted .. it will be like points system but with more control over it

_Twisted_Mods_ wrote:brandon im wanting to make a new cash system kinda like the points but you will be able to donate people your cash.. that way will make it easier to have shops like for graphics, custom forum names and w/e else you wanted .. it will be like points system but with more control over it

Ahh ok!