i ha ve posted now 5 threads in off topic noticings and i also have to ask: what is the purpose of the website mym's if we can't use it?
well it is planned to build a bridge that you can use them ingame or for some features but we couldn´t find the time building it
the biggest part would be the communication between php and java which best works via. post and ssl as we do it with the forum integration. to be honest it wouldn´t be hard to do and also wouldn´t take that much time, because the basic are already within the forum integration but I still don´t feel that it is that important. As we have some tps issues atm.
I could lead a hand with it.... Would be a great learning experience for me. I know some php and html. I did built my own ecommerce site for scratch.
It would be a post script in php, which tells the server how many credits the user has and which can remove them from the account and a javaplugin which which handles the post inquires and transfers the forum myms to the server. ofc it would need a value which calculates the worth of 1 forum mym in 1 server mym.
would be easier doing it with MySQL, just redirect the access for the forum's storage, to the database for the game's MyMs, then you wouldn't have to deal with any obfuscation regarding ratios, or if something changed.
well to make it secure I would have to tunnel the database via ssh as I do it already with another one. but if I do this you have access to all databases if you bruteforce the password. If I don´t tunnel the database and allow an external connection with a user which has only read rights on a specific table the connection is not encrypted. The only good solution I see would be a database cluster wich isn´t easy to setup and takes a lot of time on each server to be secure. Via. post as we do it atm, you need a passphrase which you can try to bruteforce too -> if you like. But as you bruteforce it from outside all your proxies will die and blocked quiete fast. Even if you should get in you still only get the information I allow you to get and sql injection won´t work.
ah my apologies, yeah, I was under the notion that everything was hosted on the same system. And yeah database clusters are a pain in the ass, when its only for minecraft.
as long as the support of the players allows it I think it is best to split everything over multiple servers. So when the webserver is down everything else runs, same with teamspeak... But I think I will change the datacenter of the webserver and teamspeakserver as they only make problems during the last 2 weeks.
yeah for sure, It is really nice however, when everything is running on the same server, as you can then run server sided checks via teamspeak, and the website as to who is who. For instance you can run APIs through teamspeak, based on a key assigned to people via their website api etc etc. Pretty interesting stuff if you ask me
