Post Reply 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Forcing Orion Client
Author Message
Fronz
Apprentice
*

Posts: 34
Likes Given: 2
Likes Received: 0 in 0 posts
Joined: Apr 2016
Reputation: 0



Post: #1
Forcing Orion Client
Hi,

We currently have a live server on 0.56b.

We have some problems regarding new clients using functions like "Ignore Stamina Check" and FPS Patch.

We want to make the transition to Orion, but we want to enforce everyone to use it because that way we can control, to some extend, what the players do.

Is there a way to force Orion Client on my shard?! Updating the Sphere to a newer version would be really difficult at this point.

I've searched Orion discord and the closest I come to was a suggestion to use a packet and then this link. I'm not sure how to or where to start.

shorturl.at/ixBFW


I'd really appreciate the help,
Fronz
(This post was last modified: 05-19-2020 11:56 AM by Fronz.)
05-19-2020 11:38 AM
Find all posts by this user Like Post Quote this message in a reply
Coruja
Sphere Developer
*****

Posts: 985
Likes Given: 5
Likes Received: 225 in 187 posts
Joined: Jul 2012
Reputation: 7

Dimension Shard

Post: #2
RE: Forcing Orion Client
The 1st rule of security is implement all security checks at server-side and never trust on what comes from client-side

You can find if this client have some specific encrypt key to enable this key on spherecrypt.ini and disable all others keys, but this can be easily faked using some client launcher that can report to server an fake client version with fake encryption key

You can also check if this client send some specific packet to server to report that it's an "orion client" but this also can be easily faked if someone find the packet number to send it manually using any other client

So unfortunately the best way to keep your server secure is using the latest sphere version with latest security fixes to keep it safe at server-side level
05-24-2020 09:06 AM
Find all posts by this user Like Post Quote this message in a reply
Post Reply 


Forum Jump:


User(s) browsing this thread: 1 Guest(s)

This forum uses Lukasz Tkacz MyBB addons.