View Single Post
Old 03-10-2004, 01:21 AM  
mryellow
Confirmed User
 
Industry Role:
Join Date: May 2001
Location: Australia
Posts: 934
Lookin good. Simple with nothing to hide.

Couple of changes to improve it...

Not a huge security concern but just to make people feel better
the queries can be changed a lil.

As part of that change they can be made to query all the
database rather than one user. This will allow people to checkout
a sponsor before signing up which is the motivation for sponsors
installing it.

Seeing the code is now public I'll make any changes public as well.

Then I maybuild an extra non-public function that will validate
that a sponsor is in-fact running the verified copy of the script.
or.... I may do this by providing a signed program file with
information specific to that sponsor and probably the time the
actual script file was created/encrypted. I have to think of a
transparent way to do this that can't be faked.

Now I have to find some people to validate it and my re-
encrypt.... Was thinking of asking here but now I'm thinking it
may be a good idea to get some people not involved in adult at
all. I'll check it out tomorrow. Think I'll try to find some people
willing to post and digitally sign a file.

As you can see I've thought about how to make this as
transparent as possible. I have in the past worked for a program
installing their copy of MPA2 however I'll work to make the
process so that there is no possible way for me to influence any
results.

btw I'll pass this back to you once it's packaged and you can take
it from there...

-Ben
__________________
Cyberwurx Hosting
After trying 5 different hosts, I found the best.
Since 1997 I've had 2 hours of downtime.
Fast support, great techs, no hype, no gimmicks.

<- I in no way endorse whatever just got stuck on the left of my post.
mryellow is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote