http://www.scirra.com/forum/ This is an XML content feed of; Scirra Forum : Plugins for Construct 2 : [Plugin] ajaxPost Copyright (c) 2006-2011 Web Wiz Forums - All Rights Reserved. Thu, 20 Jun 2013 12:07:34 +0000 Sun, 11 Nov 2012 01:44:12 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 10.01 360 www.scirra.com/forum/RSS_post_feed.asp?TID=49039 http://www.scirra.com/forum/forum_images/web_wiz_forums.png http://www.scirra.com/forum/ http://www.scirra.com/forum/plugin-ajaxpost_topic49039_post367314.html#367314 Author: Joannesalfa
Subject: 49039
Posted: 11 Nov 2012 at 1:44am

What are differences between official AJAX plugin and AJAXPost plugin?]]> Sun, 11 Nov 2012 01:44:12 +0000 http://www.scirra.com/forum/plugin-ajaxpost_topic49039.html http://www.scirra.com/forum/plugin-ajaxpost_topic49039_post367295.html#367295 Author: megatronx
Subject: 49039
Posted: 10 Nov 2012 at 9:54pm

Has anyone managed to connect this with wordpress by any chance?]]> Sat, 10 Nov 2012 21:54:36 +0000 http://www.scirra.com/forum/plugin-ajaxpost_topic49039.html http://www.scirra.com/forum/plugin-ajaxpost_topic49039_post367287.html#367287 Author: agouti1014
Subject: 49039
Posted: 10 Nov 2012 at 9:33pm

1,000 thank yous!!!    ]]> Sat, 10 Nov 2012 21:33:13 +0000 http://www.scirra.com/forum/plugin-ajaxpost_topic49039.html http://www.scirra.com/forum/plugin-ajaxpost_topic49039_post332274.html#332274 Author: aridale
Subject: 49039
Posted: 06 Jun 2012 at 10:57pm

this doesnt work on iphone? Ive set up a very simple test that works just fine from my pc but the same thing on my iphone doesnt. The php outputs the field retrieved from the database or the mysql error msg. it works fine on pc (tested with firefox 12) but not on my iphone.

The php uses $_REQUEST to get the info either from get or post and one the iphone it works if I run the php with the variables in the url but not from the c2 test program.

Any ideas?]]> Wed, 06 Jun 2012 22:57:46 +0000 http://www.scirra.com/forum/plugin-ajaxpost_topic49039.html http://www.scirra.com/forum/plugin-ajaxpost_topic49039_post323638.html#323638 Author: Joe7
Subject: 49039
Posted: 20 Apr 2012 at 4:05pm

@Maciej
Have you checked the AJAX-tutorial? If the demos in this tutorial work for you than the ajaxPost-Plugin should work too. Usage of this Plugin here is very similar.]]> Fri, 20 Apr 2012 16:05:04 +0000 http://www.scirra.com/forum/plugin-ajaxpost_topic49039.html http://www.scirra.com/forum/plugin-ajaxpost_topic49039_post323614.html#323614 Author: Maciej
Subject: 49039
Posted: 20 Apr 2012 at 2:08pm

Hi there,

I can't get this to work. Even example isn't working for me. Could you be so kind and write short tutorial on how to use it?

Regards]]> Fri, 20 Apr 2012 14:08:37 +0000 http://www.scirra.com/forum/plugin-ajaxpost_topic49039.html http://www.scirra.com/forum/plugin-ajaxpost_topic49039_post311466.html#311466 Author: Kinny
Subject: 49039
Posted: 24 Feb 2012 at 1:56pm

Thank you Joe7 and Kyatric for your answer! :)

Yes, I thought about mixing your 2 solutions (CB hash & https) because I'm looking the way to protect the username, hash session of player and score.

But I'm still care about the fact the player (called hacker) could find a way to make some ajax call from javascript console (like firebug or chrome console or anothers tools) by finding my C2 javascript function (even minified) to make the same CB Hash and call it to send a high score to server manually...

Just like EdgeWorld's game, there are some tools to hack that game even if EdgeWorld is in https mode... :(

I'm not expert and don't know very well https, but I saw that every JS Client application use that way even if post data is not encrypted (just like iCloud.com do)

Do you think https could prevent that kind of attack?]]> Fri, 24 Feb 2012 13:56:32 +0000 http://www.scirra.com/forum/plugin-ajaxpost_topic49039.html http://www.scirra.com/forum/plugin-ajaxpost_topic49039_post311066.html#311066 Author: Kyatric
Subject: 49039
Posted: 22 Feb 2012 at 11:37am

Actually, encrypted or not, just sending credentials like that is a possible security hole.
Another way to secure things is to go through https protocol (the page that does the ajax request is already a secured page, and the destination adress for the request is an https:// adress too).
This should help preventing the credential from falling into unwanted/malicious hands hopefully.]]> Wed, 22 Feb 2012 11:37:23 +0000 http://www.scirra.com/forum/plugin-ajaxpost_topic49039.html http://www.scirra.com/forum/plugin-ajaxpost_topic49039_post311041.html#311041 Author: Joe7
Subject: 49039
Posted: 22 Feb 2012 at 8:51am

Yes, it should be. As I understand the question - he asked only the encryption - e.g. post the "username"+"password" and store this encrypted string on the server.

The username and the score can send without encryption to store on the server. The client that uses the C2 game knows who he is ("username") and the app calculates the "score".

Second login: C2 encrypts username+passwort again --> send it to the server --> server: compares this string to the string stored before --> message success/fail to c2-client that wants to play

Suggestion:
If sending the username and the score unencrypted is to unsecure for you (-you can see the real-characters eg with wireshark ) - why not merge it in the encrypted string:
When the encrypted string for the
user "Joe7"+"joelspassword"
is --- "0123456789abcdef" ----
and the score is "20"
--> merge it in:
--- 01234567Joe789ab2cd0ef ---
and post this string. If you know the right positions of the characters you can pick them out

Edited by Joe7 - 22 Feb 2012 at 8:55am]]> Wed, 22 Feb 2012 08:51:04 +0000 http://www.scirra.com/forum/plugin-ajaxpost_topic49039.html http://www.scirra.com/forum/plugin-ajaxpost_topic49039_post310838.html#310838 Author: Weishaupt
Subject: 49039
Posted: 21 Feb 2012 at 11:02am

I allways thought, that HASH is a one-way thing..?!?]]> Tue, 21 Feb 2012 11:02:15 +0000 http://www.scirra.com/forum/plugin-ajaxpost_topic49039.html