desolator144 wrote:
Seriously, database security is like easy as hell. You just set the permissions correctly and...that's about it (well a few more things too lol) So anyone care to explain how it's happening?
Yes a few more things like stored procedures, attacks on the web server before the data actually gets to the database. Also need to secure the client as well to remove possibilities for SQL injection attacks. Make sure any data inputs are sanitized.
Aside from possibly accessing the master database tables, the only other thing I can think of is some sort of packet sniffing. How much data about your character (build, equipment, stats, etc) travels from your computer to the server? That data would at least contain the degree and level of each piece of equipment you have (or the other person's client wouldn't be able to display your character on their screen).
The data that travels the wire should also contain data on at least pluses, so the client knows what kind of glow to display. Not sure about blues. They'd also have to know where you're coming from to even know what network to sniff (assuming they can get access).
Just my $0.02.
but he knew about a new SOM piece I was wearing