SRL Archive - News and General

Starblaster100's Auth System: The Public Release


Starblaster100

2008-06-30 17:51:51

SCAR Scripts Auth Manager
By Starblaster100


Hey all,

Yet another of my presents to the SRL forums from me!

For a long time, I have been developing Stress Miner's Auth System to become the biggest and best. Recently, it has undergone a huge transformation to allow it to authorize multiple scripts at once with multiple admin access for different scripts.

Basically this means that all of you can use Stress Miner's very own auth system in your own scripts.

From my experienced, trying to sell a script can be tough. When you finally get selling, keeping up with the demands of both selling and updating your scripts can be even worse. With that in mind, I developed this auth system. And let me tell you now, it has a lot of many cool features


The Features



Logs are kept of everything

People who successfully authorize, or unsuccesfully authorize; all of it is logged. Successful, Failed, Banned and even Script Updates are all logged so you know who has acces to your script at all times.


Ban users for a period of time, Delete users, and add user notes

Easily keep track of users and their auths with the easy to use auth manager.


Limit the user to only allow the script to run on 1 PC, or multiple PCs

A huge feature of Stress Miner was that it was only allowed to be run on 1 PC per auth. If the user tried running the script on another PC with the same auth, it was automatically banned. This stops auth sharing!


Allows News and Current Version

Allows your users to see the latest News about your script, and the current version.


Automatically update the Script!

If the script detects that it is out of date, then the user can automatically be redirected to an update page, where, after the user authorizes himself, he can download the latest version of your script without the hassle of emailing the script author and waiting for a reply.


Admin Access with different permissions:

This auth system allows multiple admins to all administrate the same script, and even better, it allows the admins to all have different levels so that they ca access different things. Here is an example:

Starblaster100 creates Stress Miner, however he doesn't have enough time to keep up with demand / he cannot correspond with other people who are not in his time zone. To help him out, Wizzup offers to help him sell his script. However, Star doesn't want Wizzup to have full access to his admin panel. By setting Wizzup's permissions to a lower level, Wizzup can help Star add auths to Star's script, and can also see who has successfully logged into the script / unsuccessfully logged into the script, however Wizzup cannot change any of the core information, such as news, version, admin logs etc.


Allow other admins to only add a set amount of auths

To make sure that Wizzup pays Star all of the money he has collected, Wizzup's ability to add auths are limited (to what the Master Admin sets). Once Wizzup's auth limit has been reached, he must wait for the master admin of the script to reset his auth count so that he can add more auths in th future.


Ban IP addresses

If you suspect a user is trying to hack the site in order to get your scripts, you can ban their IP addresses so that they are automatically redirected away.


Prove to buyers that your script has been verified

Only scripts verified by Starblaster100 will be allowed to use the auth system, and to prove it has been verified, you can show users your own specific verified image like so:




All SCAR code has already been written for you

Best of all, all of the SCAR code needed has already been written for you, so with a few modifications, you will be ready to go.


So…

If you fancy using my auth system in your script, it must be verified by me first to check that it is fit to sell to the public, and contains no malicious code etc. It will be a tough job to get it verified as only the highest quality scripts will be verified. Send all potential script to [email]Starblaster100@gmail.com[/email]. Once it is verified, I will give you the necessary links / logons to use the auth manager.

Thanks a lot,

Starblaster100

Sir R. M8gic1an

2008-06-30 17:56:22

sounds amazing ^.^

~RM

HyperSecret

2008-06-30 17:57:25

very very nice SB100, I don't know if I would ever have good success at selling a script but maybe someday. Still very nice and useful.

one question though, you had said the Stress Miner only allowed 1 PC per auth, does this mean that now with this you can use on more than one PC per auth?

if it does then does it logs all the IPs that the auth logs in from so you can 'catch' someone giving out an auth to someone on a different IP?

P1nky

2008-06-30 17:57:44

wewt! good bye kaney.hostia :)

Starblaster100

2008-06-30 18:01:15

From: HyperSecret
very very nice SB100, I don't know if I would ever have good success at selling a script but maybe someday. Still very nice and useful.

one question though, you had said the Stress Miner only allowed 1 PC per auth, does this mean that now with this you can use on more than one PC per auth?

if it does then does it logs all the IPs that the auth logs in from so you can 'catch' someone giving out an auth to someone on a different IP?


It all depends on the script author whether he wants to allow his users to run the script on multiple PCs or just one. Both options are included.

All IPs are logged, so you can compare them and see if anyone is sharing his or her auth.

Timer

2008-06-30 18:03:16

Sweet!!

Sumilion

2008-06-30 18:04:36

Hehe… showoff :p

Jackrawl

2008-06-30 18:05:16

YOU ARE INCREDIBLE. Just how long did this take you to make?

Starblaster100

2008-06-30 18:06:02

I wold also appreciate if you could all stop trying to find the correct logon pages etc.

Anyone who persistently tries will be automatically denied if they apply for the auth system:

[php]
stressminer/index.php 68.118.4.244 68-118-4-244.dhcp.hlrg.nc.charter.com 1 July 2008, 12:55:30 AM
stressminer/index.php 68.118.4.244 68-118-4-244.dhcp.hlrg.nc.charter.com 1 July 2008, 12:55:34 AM
stressminer/index.php 68.118.4.244 68-118-4-244.dhcp.hlrg.nc.charter.com 1 July 2008, 12:55:35 AM
/index.php 68.118.4.244 68-118-4-244.dhcp.hlrg.nc.charter.com 1 July 2008, 12:55:39 AM
stressminer/index.php 82.92.130.193 host.villavu.com 1 July 2008, 12:56:15 AM
stressminer/index.php 80.177.164.213 edita.demon.co.uk 1 July 2008, 12:56:26 AM
stressminer/index.php 80.177.164.213 edita.demon.co.uk 1 July 2008, 12:56:27 AM
/index.php 81.242.228.82 82.228-242-81.adsl-dyn.isp.belgacom.be 1 July 2008, 01:00:06 AM
stressminer/index.php 81.242.228.82 82.228-242-81.adsl-dyn.isp.belgacom.be 1 July 2008, 01:00:20 AM
stressminer/index.php 71.143.153.42 71.143.153.42 1 July 2008, 01:00:46 AM
[/php]

EDIT:

Timer: Why thank you :)

Sumilion: Just delivering what I promised ;)

Jackrawl: It has been around for about a year, however, it only got all of these new extra features within the last month or so. Kept me busy (and sane!) throughout my exam period!

Timer

2008-06-30 18:09:31

:D I was trying to see if u had other cool things! :p

HyperSecret

2008-06-30 18:09:32

From: Starblaster100
I wold also appreciate if you could all stop trying to find the correct logon pages etc.

Anyone who persistently tries will be automatically denied if they apply for the auth system:

[php]
stressminer/index.php 68.118.4.244 68-118-4-244.dhcp.hlrg.nc.charter.com 1 July 2008, 12:55:30 AM
stressminer/index.php 68.118.4.244 68-118-4-244.dhcp.hlrg.nc.charter.com 1 July 2008, 12:55:34 AM
stressminer/index.php 68.118.4.244 68-118-4-244.dhcp.hlrg.nc.charter.com 1 July 2008, 12:55:35 AM
/index.php 68.118.4.244 68-118-4-244.dhcp.hlrg.nc.charter.com 1 July 2008, 12:55:39 AM
stressminer/index.php 82.92.130.193 host.villavu.com 1 July 2008, 12:56:15 AM
stressminer/index.php 80.177.164.213 edita.demon.co.uk 1 July 2008, 12:56:26 AM
stressminer/index.php 80.177.164.213 edita.demon.co.uk 1 July 2008, 12:56:27 AM
/index.php 81.242.228.82 82.228-242-81.adsl-dyn.isp.belgacom.be 1 July 2008, 01:00:06 AM
stressminer/index.php 81.242.228.82 82.228-242-81.adsl-dyn.isp.belgacom.be 1 July 2008, 01:00:20 AM
stressminer/index.php 71.143.153.42 71.143.153.42 1 July 2008, 01:00:46 AM
[/php]


I see my ip address, and bullzeye was giving out a link on IRC, might be the reason why some many all of a sudden clicked…

well that's at least why my ip is there

Starblaster100

2008-06-30 18:13:23

Timer: All i have on the site is the auth manager, and some very old powerskills help files.

HyperSecret: OK, thanks for the info

P1nky

2008-06-30 18:14:42

can we pm you the scripts instead of emailing :)?


edit: oh now i know what you mean by the "nice try smart ass" just checked a sec ago what yall talkn about :)

sOwIe

Starblaster100

2008-06-30 18:16:02

Sure

Method

2008-06-30 18:16:44

This sounds really cool, though I doubt I'll ever create a script that will be good enough for or will need an auth system. Great work, though! :)

I guess I'm a smartass since I clicked the image link and also tried to go to the index page as well, twice.

P1nky

2008-06-30 18:25:55

yeah hopefully you go a bit easy (srl member) Thinking Verifying lol ill pm you soon after sis gets off my laptop.

Scaper

2008-06-30 19:22:32

say i/we made a script for ibot for instance would we beable to still use this auth or just SRL members and for scar??

ontopic: looks sweet dude very good

Wanted

2008-06-30 19:26:59

Woah, this is freaking amazing. Very nice Star.

Smartzkid

2008-06-30 20:59:02

Amazing.

Very much appreciated (if I ever pick up SCAR again…I'd appreciate it that much more); kudos for releasing it for free.

The Claw

2008-06-30 22:48:32

Starblaster100 creates Stress Miner, however he doesn't have enough time to keep up with demand / he cannot correspond with other people who are not in his time zone. To help him out, Wizzup offers to help him sell his script. However, Star doesn't want Wizzup to have full access to his admin panel. By setting Wizzup's permissions to a lower level, Wizzup can help Star add auths to Star's script, and can also see who has successfully logged into the script / unsuccessfully logged into the script, however Wizzup cannot change any of the core information, such as news, version, admin logs etc.


I thought that was me? :rolleyes:

SubiN

2008-06-30 22:55:19

how about adding an authentication system to all the SRl member scripts so it wont get leaked out ?

P1nky

2008-07-01 00:20:26

subin lol wow your longevity blew me away tho thats nog good idea lol :P and srl member scripts isnt the problem, we could have for SMART, but, yeah aint needed srl member scripts dont leak much :)

SubiN

2008-07-01 01:13:21

lol i havent been here in a long time so i hav no idea whats going on …

Lol yeah i know its not a good idea as thers hardly any new SRL members script anyways. Everyone posts them on Junior members section =[ … I wish the good old days were back when all the good scripts were only members only =/

Naum

2008-07-01 02:21:45

Thanks alot for releasing this, I might need this in the future *BookMarked*. Thanks soo much bud.

Narcle

2008-07-01 02:30:34

I might take you up on this offer soon as I finish a worthy script to sell. :sasmokin:

Starblaster100

2008-07-01 03:59:15

From: scaper123
say i/we made a script for ibot for instance would we beable to still use this auth or just SRL members and for scar??

ontopic: looks sweet dude very good


I think I wil only limit this opportunity to SRL members, however I will have to think about the iBot stuff etc.

Since I know very little java, it would be hard for me to authorize them. Also, it would mean you have to convert all of the code to connect to the site etc from scar.

From: IceFire908
Woah, this is freaking amazing. Very nice Star.


Thanks a lot dude :)

From: Smartzkid
Amazing.

Very much appreciated (if I ever pick up SCAR again…I'd appreciate it that much more); kudos for releasing it for free.


No problem dude

From: The Claw
I thought that was me? :rolleyes:


Ah, I thought it was you lol, but I just wanted to make sure lol. Thanks for offering anyways, it was very appreciated :)

From: NaumanAkhlaQ
Thanks alot for releasing this, I might need this in the future *BookMarked*. Thanks soo much bud.


From: Narcle
I might take you up on this offer soon as I finish a worthy script to sell. :sasmokin:


No problem, I look forward to seeing them both :)

The Claw

2008-07-01 04:03:13

No worries. :) Too bad jagex did that update…but anyways, nice offer dude.

GoF

2008-07-01 04:06:24

Oh wow. I remembered you had a neat system for stress miner but didn't know it was this good :D

the scar noob

2008-07-01 10:55:22

Hey Star!! Remember me? We need to talk urgent!:p

Really nice piece of work Star. It seems soooo sweeeeet:)

Btw, do you still update your Stressminer? I just want to know cause I have a rather old version, I think xD

-Tsn.

EDIT: I bought it when version 7.6 was released and the latest version I received was 9.1, with hidden features etc;)

I just wonder if there are any updates coming in future. I'm not asking because I'm impatient, but I'm just wondering because it's a long time ago since I received an update. Please take all the time you need:)

Starblaster100

2008-07-01 11:14:06

PM me if it's urgent, I can't get on MSN much anymore i'm afriad.

Yea, I'm kinda / half way through the process of updating Stress Miner, but now the new interface has come out, I'll need to wait for SRL to be updated before I can continue.

Wanted

2008-07-01 15:50:27

From: SubiN
how about adding an authentication system to all the SRl member scripts so it wont get leaked out ?


I really like this idea, anyone else?

MylesMadness

2008-07-01 16:51:40

From: Starblaster100
PM me if it's urgent, I can't get on MSN much anymore i'm afriad.

Yea, I'm kinda / half way through the process of updating Stress Miner, but now the new interface has come out, I'll need to wait for SRL to be updated before I can continue.
Isn't only the login?

P1nky

2008-07-01 17:35:26

From: IceFire908
I really like this idea, anyone else?


like i said theres no such problem of srl member scripts gettin leaked?

Wanted

2008-07-01 17:38:47

From: P1NKY
like i said theres no such problem of srl member scripts gettin leaked?


Who really knows?

There could be all kinds of leaking going on with out anyone's knowing. This would stop all of it for 100% sure.

MylesMadness

2008-07-01 17:43:26

So who's going to check every script?

Wanted

2008-07-01 17:44:15

From: Mylesmadness
So who's going to check every script?


The script owner.

Hugolord

2008-07-01 17:55:35

Very nice Star, if only you had this back when you were looking for sellers I could have sold some :P

oh well hoping to finally getting a chance to try your miner some day (I only bought an auth and never got a chance to try it lol =/ )

P1nky

2008-07-01 18:05:51

what scripts are there to leak really, most of them are out in srl juniors… not much going on , in srl members scripts.

Negaal

2008-07-01 18:54:20

Wow. Starblaster100, YOU ARE SICK!!!!!

In good way though, really, I can't imagine what are you doing like after 10 years..I mean you're very leet in such things, you're probably going to work goverment or google..it's like wow…could I have that script what stores IP's and pages requested..

I made one, little bit shitty but it's okay..

[php]$timedetails = date("d/m/y H:i:s", time());
$theip = $_SERVER['REMOTE_ADDR'];
$file = fopen("log/log.txt","a");
fwrite($file,$timedetails . ": " . $theip . "\n");
fclose($file); [/php]

What computer languages you know and which are you're biggest projects?
Could you share you're php scripts..?

Very nice..

the scar noob

2008-07-01 19:08:31

From: Starblaster100
PM me if it's urgent, I can't get on MSN much anymore i'm afriad.

Yea, I'm kinda / half way through the process of updating Stress Miner, but now the new interface has come out, I'll need to wait for SRL to be updated before I can continue.


Np Star, like I've said before, take your time;)

From: Negaal
Wow. Starblaster100, YOU ARE SICK!!!!!

In good way though, really, I can't imagine what are you doing like after 10 years..I mean you're very leet in such things, you're probably going to work goverment or google..it's like wow…could I have that script what stores IP's and pages requested..

I made one, little bit shitty but it's okay..

[php]$timedetails = date("d/m/y H:i:s", time());
$theip = $_SERVER['REMOTE_ADDR'];
$file = fopen("log/log.txt","a");
fwrite($file,$timedetails . ": " . $theip . "\n");
fclose($file); [/php]

What computer languages you know and which are you're biggest projects?
Could you share you're php scripts..?

Very nice..


Yea, true, it rly looks sweet:)
Btw, don't you have HTML at school?:p

-Tsn.

MylesMadness

2008-07-01 19:51:18

From: IceFire908
The script owner.
I know srl members are trustable but if it isn't obbed you can just remove the auth. And if it was I wouldn't trust it. So it would have to be searched by a 3rd party, and all the scripts it would just be a trainwreck

Wanted

2008-07-01 20:17:10

From: Mylesmadness
I know srl members are trustable but if it isn't obbed you can just remove the auth. And if it was I wouldn't trust it. So it would have to be searched by a 3rd party, and all the scripts it would just be a trainwreck


Good point, it would be way to much work for Freddy to obb every script and every update for every SRL member script. Idea=Failure. (For the all SRL Memberscripts having this auth stuff that is) But, idk, w/e…

Negaal

2008-07-01 23:59:38

@TSN - Yea we have/had, but teacher is stupid ~45 old woman, who teaches sht..anything she'll say, I know..

Starblaster100

2008-07-02 04:06:42

From: Mylesmadness
Isn't only the login?


There are a couple of other small things as well I think

From: Negaal
Wow. Starblaster100, YOU ARE SICK!!!!!

In good way though, really, I can't imagine what are you doing like after 10 years..I mean you're very leet in such things, you're probably going to work goverment or google..it's like wow…could I have that script what stores IP's and pages requested..

I made one, little bit shitty but it's okay..

[php]$timedetails = date("d/m/y H:i:s", time());
$theip = $_SERVER['REMOTE_ADDR'];
$file = fopen("log/log.txt","a");
fwrite($file,$timedetails . ": " . $theip . "\n");
fclose($file); [/php]

What computer languages you know and which are you're biggest projects?
Could you share you're php scripts..?

Very nice..


haha, thanks dude.

My auth system is a mixture of (mainly) php and mysql, with css, html and javascript combined into it. It basically came around because I wanted to learn php properly. I've gotten there most of the way, but i'm not as amazing as c0de yet haha.

Biggest projects… This? And my SCAR tutorial I think. Then followed by the Pokemon game and Stress Miner, and then all of the other stuff….

I may release the source of this in a while, but not just yet. Sorry!

Lorax

2008-07-02 06:42:23

From: Starblaster100

Yea, I'm kinda / half way through the process of updating Stress Miner, but now the new interface has come out, I'll need to wait for SRL to be updated before I can continue.


Says the SRL Developer :)

Also - great auth system SB100, though I still don't fancy that multiple IP's equals instant ban. But then again every person has his way of doing things.

Starblaster100

2008-07-02 07:34:23

From: Lorax
Says the SRL Developer :)


lol, true, but i'm at work with no access to SRL or SCAR files atm.

And thanks :)

Hugolord

2008-07-02 07:35:08

From: Lorax
Says the SRL Developer :)

Also - great auth system SB100, though I still don't fancy that multiple IP's equals instant ban. But then again every person has his way of doing things.


There's a choice tho, to allow multiple ips or no.

Starblaster100

2008-07-02 07:36:49

Actually, its done on computers, not IP's. So say you have a laptop which you auto on, you can take it to a friends house etc. and still not have your auth banned.

the scar noob

2008-07-02 09:11:11

From: Starblaster100
Actually, its done on computers, not IP's. So say you have a laptop which you auto on, you can take it to a friends house etc. and still not have your auth banned.


How do you do that then? In an illegal way?:p

-Tsn.

Starblaster100

2008-07-02 09:42:20

From: the scar noob
How do you do that then? In an illegal way?:p

-Tsn.


Yes, it is very illegal. Infact, it is so illegal that if I told you, I would have to kill you… :stirthepot:

Hugolord

2008-07-02 09:45:05

From: Starblaster100
Yes, it is very illegal. Infact, it is so illegal that if I told you, I would have to kill you… :stirthepot:


It's probably a file you have no each computer with an auth right?

Starblaster100

2008-07-02 10:01:03

Something like that :)

From: IceFire908

Lol. Starblaster I'm going to have to spill the beans

C:\WINDOWS\StressMiner

Cheers


That was from an early version of divi where the prefix in WriteINI was not defined as ScriptPath.

Basically, you can delete that, it was a SCAR error.

I wouldn't hand that file out if I were you, it may still contain your char information ;)

But please, if someone does find out exactly how I do it, don't give it away :) Feel free to PM me to confirm it however

Thanks

Wanted

2008-07-02 11:20:34

From: Starblaster100
That was from an early version of divi where the prefix in WriteINI was not defined as ScriptPath.

Basically, you can delete that, it was a SCAR error.

I wouldn't hand that file out if I were you, it may still contain your char information ;)

But please, if someone does find out exactly how I do it, don't give it away :) Feel free to PM me to confirm it however

Thanks


Yea I knew that wasn't it, I'll be sure to PM you first if I ever do find out (not that I'm trying to anymore) in fact the only reason I found that was because I lost my players passwords and searched my computer and found C:\WINDOWS\Stress Miner Players.INI .

Thanks for putting that there btw, otherwise my players would have been screwed. :)

the scar noob

2008-07-02 13:59:57

From: IceFire908
Yea I knew that wasn't it, I'll be sure to PM you first if I ever do find out (not that I'm trying to anymore) in fact the only reason I found that was because I lost my players passwords and searched my computer and found C:\WINDOWS\Stress Miner Players.INI .

Thanks for putting that there btw, otherwise my players would have been screwed. :)


We all know it, it's a fact! SB saves the day:rolleyes:
Btw, I also found that file:p

-Tsn.

R0b0t1

2008-07-02 15:44:44

I usually do not like to depend on other people's workings without knowing what goes on, and moreso when it involves something proprietary.

Wanted

2008-07-02 15:48:59

From: R0b0t1
I usually do not like to depend on other people's workings without knowing what goes on, and moreso when it involves something proprietary.


Then don't, make your own authentication system and let other people who want to use his do what they want.

Hobbit

2008-07-27 02:49:48

From: Starblaster100
Something like that :)



That was from an early version of divi where the prefix in WriteINI was not defined as ScriptPath.

Basically, you can delete that, it was a SCAR error.

I wouldn't hand that file out if I were you, it may still contain your char information ;)

But please, if someone does find out exactly how I do it, don't give it away :) Feel free to PM me to confirm it however

Thanks

Last edited by Hobbit : Today at 11:43 PM. Reason: DOUBLE POST =O


Tisk Tisk…

Well this was very generous of you Star.
You auth has always been quite fanciful to me.

P1nky

2008-07-27 02:51:37

me reported woo me :)

Timer

2008-07-27 02:53:23

I will be needing this..! :)

Laur€ns

2008-08-04 03:22:40

Timer, Fist of Guthix script? :p

R0b0t1

2008-08-04 14:33:48

Hmm…. I bet he uses the registry :-P