View Single Post
  #12  
Old 11-17-2008, 04:00 AM
AndMetal
Developer
 
Join Date: Mar 2007
Location: Ohio
Posts: 648
Default

Quote:
Originally Posted by trevius View Post
Since you aren't authenticating at the login server again, you don't need a password, and that means that someone could potentially find a way to log in characters/accounts on other servers that they do not own and most importantly GM accounts. It just isn't worth that kinda risk. This would be a bit too much hassle for it to be worth the effort IMO.
I could see that being possible if you put up your own server & knew the LS account name, LS account ID #, etc, but you would also have to know what account would be that of a GM/Admin. That doesn't include knowing how to code that ability in, which I can only think of a handful of people on the forums that may be able to accomplish that.

In the same token, you could create some sort of Access Control List to limit what servers have access to put characters onto your server using some sort of password/key, either per-server or shared.

Anyways, just some thoughts...
__________________
GM-Impossible of 'A work in progress'
A non-legit PEQ DB server
How to create your own non-legit server

My Contributions to the Wiki
Reply With Quote