login script question

[bartvbl]

Keeping in mind that there has been done quite a bit of hacking using the logon scripts in spring, would it be of any help to force the host of the game to include the IP addresses from the people that "signed up" for the game in the lobby, and checking those against the IPs of the players logging on to the actual game? Then you could throw a warning once a player has been detected that has a different IP that he/she had in the lobby. Of course there would be some special cases for those using a proxy server, or have a variable IP address, but as far as I know most IP addresses are generally static, and it gives at least some kind of indication that stuff might be wrong. If someone then figures out someone is cheating, they can always see who had logged in to the game with a different IP than the one they used in the lobby.

[AF]

All the information necessary should be made available to the lobby, this should prevent the hackery being used to exploit the engine.

[Posts]

fix idea:

host gives each client a random number via lobby server,

when the client connects to the host the client sends the random number instead of the name/id to communicate its identity.