[Manialink] Sending player data's

[Th3_Darkness]

Hey Community

I had some problems with spammers the last days, so i thought about a way to stop those stupid guys -.-'

1. TrackMania2/The ML-Browser is allways sending the players login/nickname/path, that ml owners can check them with php.
2. If you don't want to send your data's you can deactivate this function in your profile...
But TM should send a value like "true" or "false" if you have activated or deactivated this function, so ManiaLink owners can see, if you are sending your datas or not.
When you open the Manialink-Browser the first time there will be a question:
"Do you want to allow sending your playerdatas?
If you dont want to send them you won't be able to use some features of the manialinks!"
To show the users that their datas are send and they can deactivate it!

So if you have deactivated sending this datas the ML-Owners can check that, and block you from writing a guestbook entry or something like that!


Cheers
Th3_Darkness

Sry, if you don't understand what i mean, just ask =)

[w1lla]

well with $p you can send the login etc, so you can catch the data and make a .php script that blocks the login.

http://www.tm-forum.com/viewtopic.php?t=15319

[Th3_Darkness]

Thats the Problem. You can fake this datas!
Thats not a good way to identify a player and stop him from spamming!

[Xymph]

Thats the Problem. You can fake this datas!
Thats not a good way to identify a player and stop him from spamming!

It's already been established that the user data is informational only, and shouldn't be relied upon for real authentication.

[Slig]

The values should be sent as POST or COOKIE, and in all requests (so the site would get it at the first request too).

It would be good to get also some hash value, specific for the login on its current game session, and a way for site wanting a real authentication to check that login/hash with a simple request on a nadeo server.