Spring RTS Engine

AF wrote:URLs containing login details are imo a gigantic security risk.

Can you explain ? Do you mean we should change the standard URL syntax all the internet is currently using ? You think letting people using URLs such as ftp://login:password@host if they want (privately of course) is a "gigantic" security risk ?

Vadi wrote:I think he meant just the username. And that would be fine to have in the url, since you can only host one game at a time (and people will be able to figure out who's hosting too, extra info).

To be clear, the <lobbyLogin> part of the URL as nothing to do with the <resourceId> part of the URL (which can be the login of the battle host). Just refer to my second post in this thread...

Vadi wrote:Edit: it just hit me, can your username be different from your in-game name after you change your name with /rename?

When you rename you are disconnected from the lobby server and have to reconnect with your new name.