actually after watching the minilogin and world.exe windows while logging in...
it seems minilogin doesnt actually check anything at all... you can connect to it from any computer with any username and any password and it allows you in...
world.exe actually checks your ip address against the database and gets your account information from that...
which is fine really... what we need to do now is change minilogin to check the user/pass and then modify the IP address in the database accordingly... this way a player has to actually have an account to play on the server, but the server will still compare by IP address to ensure that only 1 account per IP can be used (which i think is the way most server admins would prefer it... but I may be wrong)
If any of the dev's come through here and see this... any chance of a PM or something so I can help out?
|