SRL Archive - SRL Archives

Login.scar


TRiLeZ

2010-02-02 00:42:34

I fixed Login_SetGraphics.


{*******************************************************************************
procedure Login_SetGraphics(Brightness: Integer);
By: ZephyrsFury Fixed by TRiLeZ
Description: Sets graphic options in the login screen.
*******************************************************************************}
procedure Login_SetGraphics(Brightness: Integer);
var
T, x, y, tx, ty, GraphicsMask: Integer;
P: TPoint;
begin
if (LoggedIn) then Exit;
GraphicsMask := BitmapFromString(20, 8, 'beNpjYPiPBBiQwH9UgFUcmYumA' +
'JOLJoipGNMNuMwkQy8eR+LRi1U7JhuPdvx2YXUYZvgQExdYtTAAAF' +
'Km3SM=');
TypeByte(vk_Escape); //347, 273, 393, 292
T := GetSystemTime;
while (not(FindBitmapMaskTolerance(GraphicsMask, X, Y, 279, 272, 483, 352, 0, 0))) and (GetSystemTime - T < 5000) do
Wait(100);
if (FindBitmapMaskTolerance(GraphicsMask, X, Y, 279, 272, 483, 352, 0, 0)) then
Mouse(X - 20, Y + 3, 50, 5, True)
else
begin
FreeBitmap(GraphicsMask);
Exit;
end;
Wait(100);
if (Brightness > 4) then
srl_Warn('Login_SetGraphics', 'Brightness must be between 0 and 4', warn_AllVersions)
else
if (Brightness <> 0) then
begin
x := 0;
repeat
P := Point(262 + (Brightness - 1) * 32, 310);
if (GetColor(P.x, P.y) <> 16683152) then
begin
Mouse(P.x - 2, P.y, 3, 3, True);
if WaitColor(P.x, P.Y, 16683152, 1, 1000) then
break;
Inc(x);
end else
break;
until(x >= 5)
end;
repeat
if FindColor(x, y, 16777215, 143, 287, 621, 429) then
begin
Mouse(x + 10, y + 3, 10, 7, True);
getmousepos(tx, ty);
mouse(tx, ty + 10, 4, 4, true);
wait(300);
end;
until(not(FindColor(x, y, 16777215, 143, 287, 621, 429)));
Wait(100);
TypeByte(vk_Escape);
FreeBitmap(GraphicsMask);
end;

chitin

2010-02-02 01:18:45

i dont think your allowed to post that. did u ask the devs?

Bebe

2010-02-02 01:20:26

From: chitin
i dont think your allowed to post that. did u ask the devs?

wut :confused:

Frement

2010-02-02 01:20:45

Actually you are supposed to post that.

YoHoJo

2010-02-02 01:21:23

From: chitin
i dont think your allowed to post that. did u ask the devs?


SRL is free and open source for anyone to work on, update, tweak and fix.
ANYONE is free to make fixes and improvements to the SRL include and post them, in fact that's what this section here is for.
And if it get approved by a dev, it gets added to SRL.

chitin

2010-02-02 01:25:50

From: YoHoJo

And if it get approved by a dev, it gets added to SRL.


that makes sense, but if everyone were to post a fix, certain incapable noobs could just be giving out there pass and name to random people. kindof a big flaw in security.

a lot of people could earn SRL-member status and just "post a fix" and the nubs that dont know better having their pass sent to a website.

its not like it hasnt happened before.

im not sayin this code is flawed. i can see its not. im just sayin.

Bebe

2010-02-02 01:29:02

Scar prompts the user before it makes any action outside of itself (i.e. connecting to a website) It would be an easy spot and would be corrected swiftly if it ever were to happen. Plus the person would get the banhammer.

Wanted

2010-02-02 01:29:41

From: chitin
that makes sense, but if everyone were to post a fix, certain incapable noobs could just be giving out there pass and name to random people. kindof a big flaw in security.

a lot of people could earn SRL-member status and just "post a fix" and the nubs that dont know better having their pass sent to a website.

its not like it hasnt happened before.

im not sayin this code is flawed. i can see its not. im just sayin.


Do you really think the devs aren't going to catch like Players[CurrentPlayer].Pass being used in some random function before committing it to the masses xD?

YoHoJo

2010-02-02 01:31:01

1) Most of the time only people who know what they are doing attempt to fix SRL
2) If incapable noobs try to help, its nice that they are trying, but their fixes will not be added.
3) User-name/Passwords aren't stored anywhere in SRL, they are stored in user made scripts themselves
3.5) Most people are nice enough to give accounts back anyways
4) You must complete an SRL member application with a script made 100% (or mostly) on your own, we are very picky about who we choose and make sure they deserve it
5) No one that I know has gotten SRL members for just posting a small fix?

I'm just sayin'. <3

chitin

2010-02-02 01:32:27

From: Bebe
Scar prompts the user before it makes any action outside of itself (i.e. connecting to a website) It would be an easy spot and would be corrected swiftly if it ever were to happen. Plus the person would get the banhammer.


i heard teh case with hy19**** dont rember what his name was, aka harry was different. he was one of the best scripters tehre was. the infamous cave runner he made. and then after earning everyone's trust. bam he jackes every1s pass? ontop of that he proxied back into srl attempting to claim innocent.

edit:haha nvm this isnt really the thread to talk bout this so forget it.

YoHoJo

2010-02-02 01:34:34

That was with a user-made script, not something put into SRL itself.
It was also a very rare and unfortunate case :(.

chitin

2010-02-02 01:40:27

@yoho

yes it was quite unfortunate :(

.
ive been browsing and theres a couple "login.scar fixes. yet…we only need 1.

and i imagine this would be the fix for the new update? btw any1 entering machinima?

YoHoJo

2010-02-02 02:03:29

From: chitin
@yoho

yes it was quite unfortunate :(

.
ive been browsing and theres a couple "login.scar fixes. yet…we only need 1.

and i imagine this would be the fix for the new update? btw any1 entering machinima?


Yeah we only need one…. its just that different people happened to both fix it and post, a dev will choose one/parts of both and fix it.

Gu3st...

2010-02-02 07:12:25

By the way chitin, if you want to hide your username/password/pin to anyone trying to steal them, then there is ways to do this :)
Take a look at the encrypt/decrypt stuff I wrote here:

"One way to stop password stealing scripts is to use an encrypter to encrypt the password, and edit the login procedure in SRL to decrypt the password when entering the password (TypeSend(Players[CurrentPlayer].Pass); -> TypeSend(Decrypt(Players[CurrentPlayer].Pass)); )."
http://www.villavu.com/wiki/index.php/How_to_detect_password_stealing_script

Sex

2010-02-02 07:19:31

From: Zyt3x
By the way chitin, if you want to hide your username/password/pin to anyone trying to steal them, then there is ways to do this :)
Take a look at the encrypt/decrypt stuff I wrote here:

"One way to stop password stealing scripts is to use an encrypter to encrypt the password, and edit the login procedure in SRL to decrypt the password when entering the password (TypeSend(Players[CurrentPlayer].Pass); -> TypeSend(Decrypt(Players[CurrentPlayer].Pass)); )."
http://www.villavu.com/wiki/index.php/How_to_detect_password_stealing_script

That's not even encrypting/decrypting O_o.

Gu3st...

2010-02-02 08:04:06

From: Sex
That's not even encrypting/decrypting O_o.
I know, but it secures the account :P
Players[].Pass would return 'FakePass' if used in WriteLn and stuff like that

chitin

2010-02-02 13:15:10

oh im not afraid of account theft haha lol. i dont really auto except to test scripts out. more for educational purposes.