Downloading Server Mods

[♫Sani Sani Disco♫]

I like the idea of blacklisting commands. Alternatively, if it's possible, you could make it so those functions are canceled out.

Well canceling functions could make a mod possibly useless, so I'd rather just give a popup message "illegal action: blah, permission/validation necessary"

Yeah, that works.

[SH James]

why's it that our mods section doesn't have viruses anyways?

Don't give me a reason like: "because the people there aren't lifeless pricks"

Not many people write mods, and those who are proficient enough in GML to write a even a half-assed "virus" wouldn't bother to. Plus, there's nothing to gain and GML isn't powerful enough to be virus-y.

Now, can things be trojan'd? Yes, but atleast one person on these forums has to have an AV, and would announce on the thread OMFG VIRUS WTF.

The closest I found to virus in a GM game was a DLL that was TREATED as one by the antivirus. The DLL however was for getting files from a specific folder to allow you to use your own characters in Super Smash Bros Nes

[I_am_awesome]

why's it that our mods section doesn't have viruses anyways?

Don't give me a reason like: "because the people there aren't lifeless pricks"

Not many people write mods, and those who are proficient enough in GML to write a even a half-assed "virus" wouldn't bother to. Plus, there's nothing to gain and GML isn't powerful enough to be virus-y.

Now, can things be trojan'd? Yes, but atleast one person on these forums has to have an AV, and would announce on the thread OMFG VIRUS WTF.

The closest I found to virus in a GM game was a DLL that was TREATED as one by the antivirus. The DLL however was for getting files from a specific folder to allow you to use your own characters in Super Smash Bros Nes

The DLL was also for getting your credit card number :V

[Xesjah]

Why not have the game maker browser open the page where you download the mod?

It would be just as virus-prone as the mods section is now.

[NAGN]

Why not have the game maker browser open the page where you download the mod?

It would be just as virus-prone as the mods section is now.

Because that's annoying and I'm not entirely sure GM can execute external programs.

yes it can

[CandleJack]

Suddenly I ask: How would they send you a virus? They'd have to host a server with that virus running, wouldn't they crash their own computer?

I have a feeling that this question is incredibly stupid but I need to ask anyways...

[♫Sani Sani Disco♫]

Essentially the same way you could send a person a virus via map, but the same check also applies. The game checks the file extension before it allows you to download it, so if it leads to something malicious, the process is ended.

[Orangestar]

Why not have the game maker browser open the page where you download the mod?

It would be just as virus-prone as the mods section is now.

Because that's annoying and I'm not entirely sure GM can execute external programs.

yes it can

GM can splash webpage.

(I hope this isn't a bump!)

Also

I like the idea of blacklisting commands. Alternatively, if it's possible, you could make it so those functions are canceled out.

Well canceling functions could make a mod possibly useless, so I'd rather just give a popup message "illegal action: blah, permission/validation necessary"

Yeah, that works.

This plus

Well, me and bassie discussed this a little bit, and here was my idea;

We can put in an internal command filter to block any script that contains potentially dangerous commands (such as file_write), any script that DOESN'T contain any of those words will be free to be sent server to client raw.

However, if someone wants to use those potentially dangerous commands for a legitimate reason, they can submit it to a team of some sort for proof reading and validation. If it is validated, it will be uploaded to some server coupled with a keycode. This way, servers are free to distribute the keycode, which will be used by the client to download from the server.

My idea of a command blacklist would be anything that allows you to write files, connect to somewhere, or otherwise affect the computer external of the game.

this.

[SH James]

Let's see... Some game nowadays deal with LUA Scripts... I wonder if something like this is possible?

[CandleJack]

Let's see... Some game nowadays deal with LUA Scripts... I wonder if something like this is possible?

but we're talking about this game which is on GML

[Dusty]

He said something. removing the file writing functions may be troublesome in rare cases, but those would be rare cases. I'm all for it.

[Orangestar]

A'ight! lets do this!

[♫Ozoh]

the idea sounds awesome, how about you make it work like in Counter strike, when you enter a Zombie/Random/GL/anyother mod server, the engine DL you the needed files
not re writing the old ones, but making a new file

if someone suggettesd this before, i was too damn lazy to check