Account Information System - RunUO

Packer898 · 11-13-2005, 11:47 PM

This script is no longer supported.

Lucid Nagual · 11-14-2005, 12:45 AM

Nice idea. I will try it out, thanks.

dracana · 11-14-2005, 12:45 AM

Quote:

Originally Posted by Packer898

This is actually a very simple script designed to help players and staff keep track of account ownership. In case someone claims to have had a account stolen then you can use this to confirm ownership.

As it stands currently, when the player logs on it checks for a account tag. If they dont have the account tag it freezes, squelches, and hides the player and sends the account info gump. They can either fill it out or cancel and resume as normal. Now if they choose not to fill it out then it will re-appear each and everytime they logon. The idea here is to get annoying enough for them to fill out the information. Once they fill out the information in the gump it sets a tag for the account and wont re-apppear.

The Main gump simply states why we are asking them to fill this out and gives a brief description of their two choices. Password change or Account Info.

Password Menu - Allows them to change their password.

Account Info - Has several fields for them to fill in. Real Name, Birthdate, Email Address, Confirm Email, Magic Word, Magic Word hint(stolen idea from DAoC!).

All it does it write a simple .txt file with the accounts name on it. Now inside of the .txt file It holds information from the account info section.

Players can type [accountinfo and change their password anytime they like. However once they fill out the account info section it will hide this choice from the menu. This is to prevent someone from hacking/guessing the account username and password and simply changing the information afterwards.

I have added checks so that if they are Casting a spell, Holding a faction sigil or In combat, it will not allow them to use this. This is to prevent explotation in PvP/Pk/Factions.

You do NOT need to edit any distro scripts for this to work.

In AccountMainGump.cs go to line 100 and place your shard name there. It sutomatically centers the text there.

Code:

			AddHtml(189, 152, 439, 289,@"<center>Absolute UO Account Security</center>", (bool)false, (bool)false);

In AccountInfoGump.cs go to line 38 & 39 and fill in the Admin's email address(adminemail) and the location you want to store the text files(apppath).

Code:

		public const string adminemail = @"blahblah@blah.com";//Enter administrators email here
		private const string apppath = @"Data/AccountInfo/";//Enter datapath for saved text file here

Still in AccountInfoGump.cs go to line 71 and enter your shard's name in there.

Code:

			AddHtml(189, 152, 439, 289,@"<center>Absolute UO Account Information</center>", (bool)false, (bool)false);

In PasswordMenuGump.cs go to line 44 and enter your shard's name there. It also centers itself automatically.

Code:

			AddHtml(189, 152, 439, 289,@"<center>Absolute UO Password Menu</center>", (bool)false, (bool)false);

Hopr you like it. If you get any questions please post them here and I will get ack to you asap. Thanks.

Thanks Packer898, this looks great!

FYI, one thing you could do in your scripts (and to eliminate a few steps for users), is replace the hardcoded shard name, with ServerName from ServerList. You do this by using Server.Misc.ServerList.ServerName.

For example, replace...

Code:

			AddHtml(189, 152, 439, 289,@"<center>Absolute UO Account Security</center>", (bool)false, (bool)false);

with...

Code:

			AddHtml(189, 152, 439, 289,@"<center>"+Server.Misc.ServerList.ServerName+" Account Security</center>", (bool)false, (bool)false);

Do this in everyplace where the shard name is used, and the users will not need to change anything

Thanks for the great script!

Erica · 11-14-2005, 12:50 AM

Quote:

Originally Posted by Packer898

This is actually a very simple script designed to help players and staff keep track of account ownership. In case someone claims to have had a account stolen then you can use this to confirm ownership.

As it stands currently, when the player logs on it checks for a account tag. If they dont have the account tag it freezes, squelches, and hides the player and sends the account info gump. They can either fill it out or cancel and resume as normal. Now if they choose not to fill it out then it will re-appear each and everytime they logon. The idea here is to get annoying enough for them to fill out the information. Once they fill out the information in the gump it sets a tag for the account and wont re-apppear.

The Main gump simply states why we are asking them to fill this out and gives a brief description of their two choices. Password change or Account Info.

Password Menu - Allows them to change their password.

Account Info - Has several fields for them to fill in. Real Name, Birthdate, Email Address, Confirm Email, Magic Word, Magic Word hint(stolen idea from DAoC!).

All it does it write a simple .txt file with the accounts name on it. Now inside of the .txt file It holds information from the account info section.

Players can type [accountinfo and change their password anytime they like. However once they fill out the account info section it will hide this choice from the menu. This is to prevent someone from hacking/guessing the account username and password and simply changing the information afterwards.

I have added checks so that if they are Casting a spell, Holding a faction sigil or In combat, it will not allow them to use this. This is to prevent explotation in PvP/Pk/Factions.

You do NOT need to edit any distro scripts for this to work.

In AccountMainGump.cs go to line 100 and place your shard name there. It sutomatically centers the text there.

Code:

			AddHtml(189, 152, 439, 289,@"<center>Absolute UO Account Security</center>", (bool)false, (bool)false);

In AccountInfoGump.cs go to line 38 & 39 and fill in the Admin's email address(adminemail) and the location you want to store the text files(apppath).

Code:

		public const string adminemail = @"blahblah@blah.com";//Enter administrators email here
		private const string apppath = @"Data/AccountInfo/";//Enter datapath for saved text file here

Still in AccountInfoGump.cs go to line 71 and enter your shard's name in there.

Code:

			AddHtml(189, 152, 439, 289,@"<center>Absolute UO Account Information</center>", (bool)false, (bool)false);

In PasswordMenuGump.cs go to line 44 and enter your shard's name there. It also centers itself automatically.

Code:

			AddHtml(189, 152, 439, 289,@"<center>Absolute UO Password Menu</center>", (bool)false, (bool)false);

Hopr you like it. If you get any questions please post them here and I will get ack to you asap. Thanks.

would be nice so everyone see a picture of this gump nice script.

Joeku · 11-14-2005, 01:02 AM

Great idea Packer! I will install it on my next script update!

Ajantis · 11-14-2005, 01:08 AM

Awsome thanks

Packer898 · 11-14-2005, 01:16 AM

Quote:

Originally Posted by dracana

Thanks Packer898, this looks great!

FYI, one thing you could do in your scripts (and to eliminate a few steps for users), is replace the hardcoded shard name, with ServerName from ServerList. You do this by using Server.Misc.ServerList.ServerName.

For example, replace...

Code:

			AddHtml(189, 152, 439, 289,@"<center>Absolute UO Account Security</center>", (bool)false, (bool)false);

with...

Code:

			AddHtml(189, 152, 439, 289,@"<center>"+Server.Misc.ServerList.ServerName+" Account Security</center>", (bool)false, (bool)false);

Do this in everyplace where the shard name is used, and the users will not need to change anything

Thanks for the great script!

LOl You know I tried this but I couldnt get it to work so I eventually said screw it lol. I will update them asap. Thanks for that =)-

**Edit - Updated in Main post... Thanks dracana!

Packer898 · 11-14-2005, 01:35 AM

Quote:

Originally Posted by Erica

would be nice so everyone see a picture of this gump nice script.

Pictures added!

LordDark462 · 11-24-2005, 01:45 AM

Verry nice gumps. Cool idea. Does this script verify that there email address atchuly works?

Packer898 · 11-24-2005, 02:14 AM

Quote:

Originally Posted by LordDark462

Verry nice gumps. Cool idea. Does this script verify that there email address atchuly works?

Nope. It just checks to make sure its in atleast the correct format. I didnt feel like using resources to check everyone's email address when they use it.

I did however explain why it was important for them to use a correct one but if they dont and they lose the account then its really their fault. *Shrugs*

stu · 12-18-2005, 12:32 PM

on accountmaingump, ive tried turning the gump text black instead of the color it is to make it more readable by specifying font color 00000......and I cant get it to go. It would make the gump alot more readable. Is there an easy way to do this?

kartman · 12-18-2005, 03:03 PM

Cool very nice skript:

__________________________________________________ _________

project soon UO:Frozen Age

To olox bag gump Olox Bag:Gump
elf bag http://www.runuo.com/forums/showthre...908#post454908

goofykid · 01-08-2006, 09:07 PM

Quote:

Originally Posted by Packer898

This is actually a very simple script designed to help players and staff keep track of account ownership. In case someone claims to have had a account stolen then you can use this to confirm ownership.

As it stands currently, when the player logs on it checks for a account tag. If they dont have the account tag it freezes, squelches, and hides the player and sends the account info gump. They can either fill it out or cancel and resume as normal. Now if they choose not to fill it out then it will re-appear each and everytime they logon. The idea here is to get annoying enough for them to fill out the information. Once they fill out the information in the gump it sets a tag for the account and wont re-apppear.

The Main gump simply states why we are asking them to fill this out and gives a brief description of their two choices. Password change or Account Info.

Password Menu - Allows them to change their password.

Account Info - Has several fields for them to fill in. Real Name, Birthdate, Email Address, Confirm Email, Magic Word, Magic Word hint(stolen idea from DAoC!).

All it does it write a simple .txt file with the accounts name on it. Now inside of the .txt file It holds information from the account info section.

Players can type [accountinfo and change their password anytime they like. However once they fill out the account info section it will hide this choice from the menu. This is to prevent someone from hacking/guessing the account username and password and simply changing the information afterwards.

I have added checks so that if they are Casting a spell, Holding a faction sigil or In combat, it will not allow them to use this. This is to prevent explotation in PvP/Pk/Factions.

You do NOT need to edit any distro scripts for this to work.

In AccountInfoGump.cs go to line 38 & 39 and fill in the Admin's email address(adminemail) and the location you want to store the text files(apppath).

Code:

		public const string adminemail = @"blahblah@blah.com";//Enter administrators email here
		private const string apppath = @"Data/AccountInfo/";//Enter datapath for saved text file here

Hope you like it. If you get any questions please post them here and I will get ack to you asap. Thanks.

Edit - Updated so it automatically updates the shardname on the gumps from your serverlist name. Thanks to dracana fro showing me how to do this! Also added pictures so you can see what it looks like.

when i try to open the script it shows up open with what like almost all scripts but when i hit oen with notepad it show me this
Rar! Ïs
à t K Á ÿ! V@€#-ºm33& Account Info System\AccountInfoGump.cs °b2‘ŒÑ<Ù½ÆÕOƒã[ÝÍ‘ †Nc#$rMŽªºïJÚzúj‹¢rHn#ï»u¶.óáˆÑÎ©¾¹[©™™ž^]Þ^|^ÿ„¯/ËWy•g™—j‚U£Âoh v¹þÀ>…—Z¼þÜï;,¹~ëäÞ»Êá?+÷/ñ˜…®µbÍzA?ü•×šrîÙ)*H˜°A6”–!OŠÎ*zK Ü×Kh–pb3ò…ýªÛDÇj¶ ?¦gœÆ'ã£”Ê~*u<Tª“¹ÿbÚÆyÜ!'ØÄ8&£ü
•‡‹›¬›îßâ#¥¸ç?e~ÛOÞHµšÅ»F~¥šjSÃ÷OôÞºû
·ŸCìžkg3*d,Öàrû¤Ý¾÷b¹›Æ³nÏ`w»h<ˆÃ¯‚‰•YÙwœêòÈÿ *¦á¼žâ–×S¶“%F¬O*/(/&³/cM†3£xyîŒêZ°[·äÖÕ¨øÞûÐÌN>[•äÄvØÝmíý „ÐöŽdI8dè7\o?ÌŽÎ§Su‹…zðí"dücéÕN½~Ëm2F[]60M³ò¼ D0`].Ñ}÷À´9ÇÓœÿÍÿ¼¬6&zdúuûv˜},¯UÆnž†5Íµ†9¡Zî4Û` Fu—îüwþL`—ës¸ÙñôÄ“A)|S¢ÇØµs®( ¸O2€¢à¸¹py¹‡1l¬¸¥z4}PÒW`ñ Î?<D[É9vùÁZÐ/^ê2%³–Â,QI§Ñ”°Mƒƒä^Èóálž®Ìi!3$Eçbl@_»}¶ëé ¬ÆÜõ gR)÷ ›*ÈöO!ÛtÁÒÙ´˜ò³É¶xp*p’O‘×zužw]c´Âw™á!Y›@)Pê Þs\ªœšÛ‰¢Ôœ“WN:\‹q9Âu2ÕÐ›X8%3&F²pÍÉsMC&FoŽvM Ú&¸pŠ¦GIþî¶ãÌYl»œ¹çx¨Ñô´õè³rÆüyŽÂ¾†W¼&QûèŽyíZàÊ’«J |˜ý4>gCf-+Okj)Õ§Ölì†Ä/Z¬½$ƒ7®íZÕG@éeE<›FˆŸÜ»4M£mHÈö?q°9V1¶jVƒ™O# %7yTØŠ¶3æÊÈý‹™Åú÷üì)«HY¾ëOàòQŒzÕ²ãÏ; ™‚UGÚÅ’æ¥A@i‚óJ€À
Z%¡IE<íÞ¶Ç¼¼Á|ºÍ˜&ôˆ¯ã¦?‘Z}bõBá]¸½CRH¼ÁwŒÔ<c‰O¹¬e.kzÈ(xë“à/ÑÜU7?`¿ìÁÔJiUÑ±ï»?Ü~Pžw–’HG—"3x°^*Ðóy¸æ‘ Ð,U§TÚ¦b¹“£u%¤MsÕêÔÇI¿›i9—Hœ$ˆî cu¦¹Å¦!s'-$t^Ó8bH©ÚG;ƒµC],þå”—ð<CÈ‘qJ5B¢—µ'Ï®Š†X¥Ñ§;V7¾±±®h\ß5â!'Êøºƒ EÍt´˜K7ày¤~"ÀƒðÿR~ªlç¦rlüç×ÒÎô:cºëVŠNw:ÒoÝ /ÞiUŠ4~â¾ÿx_= Åº;áo*cê˜Ä:Ä§·aË#I¿+¡ÑËr å‘˜…`ÿ% ¤ijìæ:¥è$šg™·ƒð›@›–ü³+í¸É=aAÕ#2ÀÖ•Ðãôœïf 8Ÿ©1hñ¥ÿÞÌáž¤»3‰²QßKKšøøc#¢w²ì©0hðncÔ}¡œD»Ñ¬ á <Ý
>Í²*ƒj{Þ™µE2=ýtÒ©Û@îÊ(øjò¢þÔ}8ê"dÇå_RVD¡# , %a¨¨£+|Ò¾³s•Y„ç’}tÃ½}gïàÐHtÍ/cV*ü¿ÌÛ-*T“.™°<‹¢Ùài ÀRçýi¹Ì”›°ëgü±|çùjéðEÐ¡ÏšA±Z÷Á§íª¡ÏÇ×ë'SŒµQI q*¼qùïåÂž`òž—IcDÍìCXX =
]seOÇ+ÂÏ…×¦î~Xm«H+„kÇ‰É©é´ùèÝÃ©>®3:F¼®nkš«›¢ æû—7û"±îÞ¶äk_zKâCÊðÛ©»"‡8–ŽÝðA#(¹‚Ò:ß}Ld’v—kcÓF×÷
Géyµv?NÔ[Àƒ÷ôÞIQéS‰5?þNNA ¾þIˆ&¤âqô' p‡-ˆnòèÙbuRØZ" W¯–ƒf.eÝÑ²Â‹*Ärëx?˜[Xº¥À@>Åt½’9Ú´*Æy\‹n’`~òkJIïi,¼º
žnu6Cj,¸ý´@yä;ÆDEìáãXÞã(Uƒûgµý¸[Ó…“‚N£|9=«£Gì”r‚ÿ«N÷\‡¹[}æ ‡6ÚàÐäíÃç§<Én¢ãÔNâ˜OÕ3¥˜¡,…ŸÁv³*9v0çFj•Fá1 ÒáD2 ß
å¼q$Ë E`÷9Vð~oC—oCoC†ª†øŒÄ`3Õ‹óˆÁ°
•þ&9•Q$`-)»ª)?º¢ÒFHDúW¥DÏ|Cò+¬WÃÅ;–ë~q`®˜¶½Æ3™
ÄãäW<Ç)bêŒÄÝ{_þëç‹_öšØ|Ø?ÓõÃþ°ÿl>*áŸ‡cæD OúñÀzpòaúáýQû·®|jb}s&#C—
ØÆ:ènI*ü|’17¯6Ð×³5¸G!X—H¶¼dkÊv€&•pþy&ö–_·’ v6ÐÄ*fOÖÄÑÎ6¹f@éJÄò‘ ¦‚Äe™Âˆ³7æþ "÷„œ¸¨÷†‰7D4ÀrJV;dIO‘ŠIÜ3âiD‘ö_
Ñ
£ðçØ˜6=I¢{[ÓŸòÞ¯˜W ò±
Ï‰0—_t(o|²c"B_¬`e)NDLÌà’"àÒq:æ¦Âøn|ï0GW ¡»9Ý/ÚGr@o> o†˜% ‰}Ô0´Y#~žÞz_cXïØiˆ#aa Î@’0d–àòZS4Á§«1U÷¦–ÑjäŸ·r‹K“DÏ? EÏ™<4ÂW8Ùt¨›ÉI
eáŒŒG±J]*PÑØ¤oÃ#\z¾¯›%¼qÒêçúïT Z:RtÉ ÷rŠB‹!˜HðóMYxŸ,/"ƒt(èÞU
/£Ö `G%ôxÔ*Ò•‘èÈ¹qð€Ä;—¼.ÚB¿c‰^Ñ•(áÿäwàt K é ? à2æM4ºm33& Account Info System\AccountMainGump.cs ð†pQÌÏÍY[ÙÐ/áö¯$¤L´›jÇÕDèqÆÀi¶#vK¤IÊ%S¥5T¢Þ€ŠI³Ó™»¤¢TM¸-“Í†‰Dîng3³Wæ3àƒœÎ;é÷ØÎy²CeàûÿÀ:©‡šÀþö·©†Âãä¶Vœ'»
üÌüÑ®ÏMJŒÛ^¾n$ßûã´ë›Ä²µ‚eèƒÆjKq§Ö¾\q3®¸fH¾<£¤ ¬vFþæîá3|Õ·|$yÜÂ¶ló rÎ½*{‰äÿeŸæÜ³ºBV·”tÓô¶bœÒuóôu‘ã_w·¾¿y£’ô0Ì–-à3ú‹×®P6Ôƒo²AÎW+mË¢œ–‰j’ÜnáxžÌ'ïWäñ©7c¼=Œ…q PáB¼ø(‘*V^íB‡÷`ÿMÇy9Ìfs»Ô*uU²‰qÑ‰5˜>fŒY@Þ’œø¥Q ›fsúÞ:™a<g]'V3¾kûóù!„ALÉn^"*´v4ýbœ>Ÿ³”7ðnÛ«‹Ó÷s™ðR; Ò—àôé…ýŽ·Ìóú
ižóûàûG_:áoÇ®º#(_üÏk`Â»m0FE¸“y&%ÖŠ*>|; vºÓ!Íw²Â¿#U¬$H+ÖöÇbuFbÜÎÝWŸ„Žà>@
JÕfHsÃ¿‡3%môT+™I[Þh¼wÇkR„Ô®&I^?1¢kkcˆUÐVçT‘Õ’’Ÿ9–¿ßõ9n›I?„i …-ÙÀ¶‚ÂÌ{ –=}(@ú„³1†'¿iŒ8;ïhR¢“JÕ*ÒQ=O]9"*ÒÕÂD/ËŒ©€ÅºšºÓk{°dçŒ8dÊ‡!WÐ^ªvÓjeÎt˜[mE©§•=¹3ð s×¥s°‹ÊN¡ Ï*¡iNZª‡IB©ï÷õ[‹f:\Å*ªä¨šÎ÷ƒ!Á"žz—…RpÆÎ ‚ ’õªjP<o;ò4OáŠ/D¯§[‘¦YÉëÕýB*±xÌéüÕÞ’¿ŠÌ®TøJ˜”R¢6“gW…Œ¡d Sa
ÊQ«i!UÛB.dW†‰+Ám']"øOŒY_tw£p—Gr¦ÅWã¼ÎdªPéë:1H¿!TIüjVo:Û#L’’âc< ‡DgL’ùÒšP©Q6*
;jdþ®s4Öœm7¡oqŸë“º´¨ Zi)*á.__¿}¿6|h×ò#WIÆ&Ã!x›äõá~DÜ>†Æ»î|f½eyý>Â¸Äk èóR·_+©4U4;’¡u‚Ô«ƒ%…lWÏQ{éìmÓ–0MÃp*CŽ&^Ý
oÅ»¥ê÷†S-=ç©–zEÐØ*?Ÿ¬2³ºð™«gsrAlÚ³Ümí€?gv»³bg-ñÞÚÝ´: Wb$Y‡v6>ë”Élínd¥ŒŒä~û`’ÝÉ½*Øyzjp0ˆ3ý*yèaj²~üÁa ¥}¹Ã_=IáS©V¤àØ›}õWuÖë!€Rð*¿Hö
¸~aèÊdÇ¸Ð¡ÓŸ8ÏõÞ6ª4ŽŒ9Ix§"æ—fna}†ÈarIËqP ¦¹+‚y'c1¼dÄPøa£ÐçŒŠlÚ¸&b`‹*G ›cLhž4‡‡35 (±8ÊÓxQR‘3eÛhÍ;º©ÂšÙ£ºö $xÿz*»ŠSÞ3ó Béq¦âCÂ¼Í_—@#»q51Ë~T©QÇP²'dÐE˜qMFØ*9r,ß5õÀú ñ¡} „ù¢sE&¹ Ö(PÃ.H†>4^ç.Ïg{¡ÑŽ*¼êÔï!F€Z•”~K>*Q(â;R¯CÁ ðX®&›nwp³Q#- -¢¸%¡–e-û²^ñ H˜a¯"I©AÂÒJ3áÆày2³4 „5sûD„Ö‚ÂVÔêß1¾ƒÏŒÃ£$#á×Aã%Îêäôh¿¢O9Š¹›«³eoÿMJN J¦‚ÄÕ^&í‡6ì‡M›´u
&Õ>•’Bu©UÁâ§G¯Ž†h¸Æ*0*&â
Hoý)Í*Ë9!)k0-œUvü„Õ+½ŒàÆîóíYüòZŒGL£ÐR-mZú–Š£/’¤ê®CÏg# ®‡Ê îj´øú~§Ñ†H`<.¢@M ®HÊÓ£ož*ô©æGÄÓì^%ToVHÓ—Šžìá§áAžòI5äÆèfN‚ ôíÊ´oG:„SÃú::µ§)]ã³Å&òŸ
¾V”øw@Ê8vRÕòÆJ}žPÍ[;žƒàÿ¨|±t L Í _ åF9ºm33' Account Info System\PasswordMenuGump.cs ð2$ELÌÌÓÍAWÙîfü9ÇäÝ®¨“r=ŽK76ÙvÛ7#’e’îåËáºšE¶².‡© .»lÿ}ÌIô® I´Ôé»mß7’&Ñ#«„~dtÁÀ ð‚0¯}¬ç‰ÿè*w8ÿà Î³¬b6õNe^{àã«’é[ÆOV6±5ÙŒa~jµW»zÆiC;÷+¯0ã{ÄQ$É—Â
/T|]>‹ÙSÐXÎÀÙd^öLÂIéýÛ›¤ðÕ®À}Ò<äi×ÌŠ˜¡)äR×‘=Âx?2Ç õvYÜ!+ÝÊ9¶aîfJ«Å“¨w“— Ž•§:´Óaaâa†’Ä»€ú*ëmXÅ÷OOfU–eÐú+%Š*#¬BR[‘Ìn“‡ÚSRxÄ›*¤;Š¶¸H°¢®˜$h•+.õEÿÚô°Ìw“¥_;½@/#7Ì²ÒO%Ò‰}Á©D–{´Íº¬¨Álõ¦5¥«;¿’›èÎÀN|*oêö83:\ \´’KÔñ8.eÈÁôæâë—„§4Ô4à^‰ë¯v‘½·¦ƒWãŸ mV£{ÐEÒùgªbÇy–"Ì€u°xä(‚ã_¨6DE„kùôºã[ôrB™CXœq{°“€–Î…¡ÏEÅZ¸9/ÓõˆŒñ+ŠAÝu8Yqåbx/ªÌ>v5OC…6)Ç>#ªà¥…ì=øÓ\ó.¼}`Ž”ëê÷ó,à”<m¯YMÝÙ SqMÞØAVw`k–S ™ÄÐ®Ú·rµgl3S|ím{yCEZ¼ã

vµiôä/Áÿ{o§1}‡Zîyñ˜À¿³˜Ô¥¬*·ù¡°CèÉˆ©G6&rX"$Î•rRcn'qùQò
[0gÂ«k‘ý!GŽ*åŠ!¶õ· ¿á¿VÌîNÈÖuú‚¹A:fäB*?ª"¼Z}l¿Ñ1C·©=ëŠÛëiúõÒ%0åí× X\¤êsBNVÃ~18Ø’°o9„¦^1…²®Aá\ŒŠÂbÕ¾¦N ˜å¦‰&Úº3i½ëŠ”çN„ùü1~!Ê’5§‹Ñ"ªˆyÌô©®‰Û*ˆMà¨÷ ®uTœëe!ößƒvËððÖ¬¿•žýnÓè'–„K‡ VéŸS+M$WšežfBv¨«ƒ[êdI5%ó•°àj%_pÙ]Š}ÔáÒ x±:´™1y4þIõ¥VÆ§(Œ~$ŒÓkˆ»(¡Ro8ÉRþ ÅKÆÃbô”j)Öwf§FB¿ "³P—ÊÌJG.Óÿ¾lf\Á Eäs‰èœ%ž2õ˜Fngxâ@'ð%é-8Õ³<X@ÅíbG›š™Ù!ËÇÄ ÷u9~¶]þÜÿÞ8ú•2¯O;®o¸t.Öìi–6Y'Ïç¯NgÃú
B4£ ¹Ô†àJà²õˆçLClK*Zsi‰šžR°ú¿…"%5‘^^
›&¿á»³K½ªèG < (ÕVP<5”¼R».i*ýtZ¸«n³]$èè8Ù:*SôÎ
[§/ÏbVFµÇG@ƒtx÷.ßG6`OØA
Qhž~¡SË¯B®ƒ”]9æÞ`Ìuìõ¶o*`ôàŽâè
Ò YCfÖÀõ?\jkµi©9ƒ©ÿëƒ¾†ÿL£ÏoÅ—ÐíøßT6„/9~¶Ã@Ÿ–ýešG`E±îA¾–³ôžú{ó¥¨ÑLí†·l^]ÙpïK³®{Ãü?³¿ê“ tà8 ºm30 Account Info System ðV!ƒÄ={ @

this is just a guess but i dont think its supose to look like that lol any ideas guys i never had this problme befor lol

WarAngel · 01-08-2006, 09:28 PM

You can't open a rar using Notepad. You have to download WinRar and extract it. Do a simple Google search for "WinRar", it will give you the correct results.

goofykid · 01-08-2006, 09:50 PM

Quote:

Originally Posted by WarAngel

You can't open a rar using Notepad. You have to download WinRar and extract it. Do a simple Google search for "WinRar", it will give you the correct results.

man that stinks lol ive used the same way on the new_motd befor and it did the same thing to me a min ago and ive opened it with notepad befor without winrar lol oh well thanks i just wont dl them ill have my host do it lol im too lazy for that kind of work lol hehe bet strangely i get my fun out of staffing and making shards and stuff like that not playing on them lol

No@h · 02-22-2006, 02:04 PM

Thanks for sharing. I started with your script and built a complete security system up for my shard. Of course, i gave your credits.

Packer898 · 02-22-2006, 03:21 PM

Quote:

Originally Posted by No@h

Thanks for sharing. I started with your script and built a complete security system up for my shard. Of course, i gave your credits.

Thanks Glad it was helpful.

zardd · 02-23-2006, 07:17 AM

I remember there used to be an issue with the [password command security wise..

Would this still be exploitable using this or was that bug squashed a while ago?

XxSP1DERxX · 02-23-2006, 01:23 PM

No offense to you Packer, but I hate the usage of the term 'Magic Word'. If you notice 99% of websites use the term 'Security Question', where the 'Magic Word Hint' must be in the form of a question, and the answer is the 'Magic Word'.

There are a few problems with account information systems (when they are used for security). First off, people have the ability to put in bullshit information. This is not inheretly a problem because as long as they know the information, there is no harm. However more than 90% of the time when a player logs in (and I remember this from Defiance), it would almost FORCE them to supply a magic word and to get rid of the nagging annoyance, they put something random like 'FUCK', 'IHATETHIS', '1234', 'BITCH', or something else to that effect. Once they are asked to provide their magic word for password or other account changes, they cannot remember.
The next issue with this is that some of the information (short of email address) seems intrusive, and then gives more incentive for the person to bullshit in order to prevent 'privacy risks'.
Regardless of whether this is correct or not on the client or admins side, the problem does lie in the system itself. How do you verify a previously uncomfirmed identity? If the identity is based on fraudulent information, then there is no true identity at all.

I have thought about ways to dilute the problems (because they will always exist). One way I thought about was to use the email in order to confirm their identity by sending a confirmation code that they type into the system. However emails are not as static as we want them to be. Some websites only allow you to change your email if you have access tot he old and the new, and that is fine. However what if joe shmoe lost his internet for a month, comes back and he logs in but in order to change his password because he doesn't want his brother using it, he must use his old email. Well lets say he had verizon dsl, but changed to timewarner cable. There is a problem since his verizon dsl email does not work. Others have suggested to have a staff member change it and the person would tell them what the old email was (as a confirmation). Well an average person has 1-2 emails, and most of their friends (the most likely to steal/hack their accoutns), knows at least one. Many times people post their emails in their AIM profile or Myspace or LiveJournal, again, a big problem.
Well to remedy the email problem we use the security question.... but that brings us back to my first point about forgetting your bullshit information. I have in the past had a question like, "What is your father's middle name?" and I have put 'i lost my dog on wednesday', however I forgot the exact spelling and phrasing 3 days later because it was a half-assed way of bullshitting in order for someone who knows my father's middle name, to not be able to steal my information.
Many shards have requested that the person log on with the original IP that created the account, however how do you force a person on an ISP with a dynamic IP to login with a specific IP? My friend down the street knew that I had UO accounts and he has the same ISP, so subnets and similar hostmasks don't work either.

In conclusion, these systems (Player/Account Control Panels) are interesting systems in order to automate services, however how do we ensure that someone isn't impersonating the owner of the account? IS there a way? Should we not even care?

Packer898 · 02-23-2006, 04:36 PM

XxSp1derxX - I agree with you on 90% of your above post. This is not mandatory for players to fill out they can simply select not to do it and continue playing. However because of issues on another shard I worked on with Brazilian players hacking accounts I deceided that something was needed incase an account was stolen. In the current RunUO system there is no way at all for someone to identify account ownership. If we used credit cards like most "pay-to-play" games did then it would be alot easier to identify owners.

The initial gump explains clearly the reasons for this and I can only hope that a player would read this and take it to heart. In the case that they did just put in random garbage then IF their account did get stolen then there would be little to no way of proving that it was their's or not.

To answer the MagicWord portion It can simply be commented out or change to something else if the owner doesnt like it.

I agree that these type of systems are rather crude and the information is sometimes intrusive but I honestly couldnt think of another way to do this that would be as useful incase of theft.

XxSP1DERxX · 02-23-2006, 05:32 PM

You are definately correct and I agree with you, thats why I asked the general question to everyone, is it really possible? Alot of people try to protect player's accounts as much as possible, but even OSI will tell you that you are SOL if you get a backdoor keylogging trojan for example.
Some say lets do computer identification, but that doesn't help because it can be faked (if you are willing to enforce it enough and your shard is large enough, someone is bound to find a way around it).

You are also right that credit cards are one of the end all to this. AOL only allows you to change your password if you call them up, meaning there are many check points. First you must verify information which does NOT show up online. the phone that you are calling from SHOULD match that of which is on the account. You must recite personal information like last 4 digits of SSN, last 4 digits of credit card, activation code of credit card, etc. Also AOL actually asks you what the answer is to your security question because they will reset it the same way you would online.

Even at that point if you are so dumb as to not record that information, then I assume at some point you have to consider yourself shit out of luck.

Also I do realize you can cahnge the 'magic word' phrase to say 'security question', but I just think its weird that people term it that. I dunno where it came up from :\

Savaal · 02-23-2006, 06:20 PM

Thanks for sharing,

The gumps where verry well made, great job!

11-13-2005, 11:47 PM	#1 (permalink)
Packer898 Forum Expert Join Date: Dec 2004 Location: Tulsa, Oklahoma Age: 35 Posts: 2,378	[1.0]Account Information System - Removed... This script is no longer supported. Last edited by Packer898; 06-18-2006 at 10:18 PM.

11-14-2005, 12:45 AM	#2 (permalink)
Lucid Nagual Forum Expert Join Date: Nov 2004 Location: Beyond the Gates of Hell Age: 37 Posts: 3,509	Nice idea. I will try it out, thanks. __________________ Leader of the Anti-OSI Movement. Inventing a new game experience in an EA Games-free environment. Don Juan Matus "The basic difference between an ordinary man and a warrior is that a warrior takes everything as a challenge, while an ordinary man takes everything as a blessing or as a curse." My Customs: Custom_BODs All_Spells Easy_Level_System Advanced_Archery Addon_Generator Addon_2_Static

12-18-2005, 03:03 PM	#12 (permalink)
kartman Account Terminated Join Date: Dec 2005 Posts: 16	Cool very nice skript: __________________________________________________ _________ project soon UO:Frozen Age To olox bag gump Olox Bag:Gump elf bag http://www.runuo.com/forums/showthre...908#post454908 Last edited by kartman; 12-19-2005 at 07:47 AM.

02-23-2006, 01:23 PM	#19 (permalink)
XxSP1DERxX Join Date: Oct 2002 Age: 23 Posts: 4,689	No offense to you Packer, but I hate the usage of the term 'Magic Word'. If you notice 99% of websites use the term 'Security Question', where the 'Magic Word Hint' must be in the form of a question, and the answer is the 'Magic Word'. There are a few problems with account information systems (when they are used for security). First off, people have the ability to put in bullshit information. This is not inheretly a problem because as long as they know the information, there is no harm. However more than 90% of the time when a player logs in (and I remember this from Defiance), it would almost FORCE them to supply a magic word and to get rid of the nagging annoyance, they put something random like 'FUCK', 'IHATETHIS', '1234', 'BITCH', or something else to that effect. Once they are asked to provide their magic word for password or other account changes, they cannot remember. The next issue with this is that some of the information (short of email address) seems intrusive, and then gives more incentive for the person to bullshit in order to prevent 'privacy risks'. Regardless of whether this is correct or not on the client or admins side, the problem does lie in the system itself. How do you verify a previously uncomfirmed identity? If the identity is based on fraudulent information, then there is no true identity at all. I have thought about ways to dilute the problems (because they will always exist). One way I thought about was to use the email in order to confirm their identity by sending a confirmation code that they type into the system. However emails are not as static as we want them to be. Some websites only allow you to change your email if you have access tot he old and the new, and that is fine. However what if joe shmoe lost his internet for a month, comes back and he logs in but in order to change his password because he doesn't want his brother using it, he must use his old email. Well lets say he had verizon dsl, but changed to timewarner cable. There is a problem since his verizon dsl email does not work. Others have suggested to have a staff member change it and the person would tell them what the old email was (as a confirmation). Well an average person has 1-2 emails, and most of their friends (the most likely to steal/hack their accoutns), knows at least one. Many times people post their emails in their AIM profile or Myspace or LiveJournal, again, a big problem. Well to remedy the email problem we use the security question.... but that brings us back to my first point about forgetting your bullshit information. I have in the past had a question like, "What is your father's middle name?" and I have put 'i lost my dog on wednesday', however I forgot the exact spelling and phrasing 3 days later because it was a half-assed way of bullshitting in order for someone who knows my father's middle name, to not be able to steal my information. Many shards have requested that the person log on with the original IP that created the account, however how do you force a person on an ISP with a dynamic IP to login with a specific IP? My friend down the street knew that I had UO accounts and he has the same ISP, so subnets and similar hostmasks don't work either. In conclusion, these systems (Player/Account Control Panels) are interesting systems in order to automate services, however how do we ensure that someone isn't impersonating the owner of the account? IS there a way? Should we not even care? Last edited by XxSP1DERxX; 02-23-2006 at 01:27 PM.

02-23-2006, 04:36 PM	#20 (permalink)
Packer898 Forum Expert Join Date: Dec 2004 Location: Tulsa, Oklahoma Age: 35 Posts: 2,378	XxSp1derxX - I agree with you on 90% of your above post. This is not mandatory for players to fill out they can simply select not to do it and continue playing. However because of issues on another shard I worked on with Brazilian players hacking accounts I deceided that something was needed incase an account was stolen. In the current RunUO system there is no way at all for someone to identify account ownership. If we used credit cards like most "pay-to-play" games did then it would be alot easier to identify owners. The initial gump explains clearly the reasons for this and I can only hope that a player would read this and take it to heart. In the case that they did just put in random garbage then IF their account did get stolen then there would be little to no way of proving that it was their's or not. To answer the MagicWord portion It can simply be commented out or change to something else if the owner doesnt like it. I agree that these type of systems are rather crude and the information is sometimes intrusive but I honestly couldnt think of another way to do this that would be as useful incase of theft. __________________ "We sometimes congratulate ourselves at the moment of waking from a troubled dream; it may be so the moment after death." ~Nathaniel Hawthorne

11-14-2005, 01:02 AM	#5 (permalink)
Joeku Forum Master Join Date: Feb 2005 Location: ShatteredSosaria.com Posts: 9,261	Great idea Packer! I will install it on my next script update!

11-14-2005, 01:08 AM	#6 (permalink)
Ajantis Join Date: Oct 2005 Posts: 169	Awsome thanks

11-24-2005, 01:45 AM	#9 (permalink)
LordDark462 Newbie Join Date: Sep 2004 Age: 26 Posts: 95	Verry nice gumps. Cool idea. Does this script verify that there email address atchuly works?

12-18-2005, 12:32 PM	#11 (permalink)
stu Join Date: Jun 2005 Location: Jackson, MS Age: 40 Posts: 234	on accountmaingump, ive tried turning the gump text black instead of the color it is to make it more readable by specifying font color 00000......and I cant get it to go. It would make the gump alot more readable. Is there an easy way to do this?

01-08-2006, 09:28 PM	#14 (permalink)
WarAngel Account Terminated Join Date: Jun 2004 Location: Cincinnati, Ohio Age: 20 Posts: 3,954	You can't open a rar using Notepad. You have to download WinRar and extract it. Do a simple Google search for "WinRar", it will give you the correct results.

02-22-2006, 02:04 PM	#16 (permalink)
No@h Forum Newbie Join Date: Apr 2005 Age: 25 Posts: 17	Thanks for sharing. I started with your script and built a complete security system up for my shard. Of course, i gave your credits.

02-23-2006, 07:17 AM	#18 (permalink)
zardd Forum Novice Join Date: Feb 2006 Location: The land down under Posts: 122	I remember there used to be an issue with the [password command security wise.. Would this still be exploitable using this or was that bug squashed a while ago?

02-23-2006, 05:32 PM	#21 (permalink)
XxSP1DERxX Join Date: Oct 2002 Age: 23 Posts: 4,689	You are definately correct and I agree with you, thats why I asked the general question to everyone, is it really possible? Alot of people try to protect player's accounts as much as possible, but even OSI will tell you that you are SOL if you get a backdoor keylogging trojan for example. Some say lets do computer identification, but that doesn't help because it can be faked (if you are willing to enforce it enough and your shard is large enough, someone is bound to find a way around it). You are also right that credit cards are one of the end all to this. AOL only allows you to change your password if you call them up, meaning there are many check points. First you must verify information which does NOT show up online. the phone that you are calling from SHOULD match that of which is on the account. You must recite personal information like last 4 digits of SSN, last 4 digits of credit card, activation code of credit card, etc. Also AOL actually asks you what the answer is to your security question because they will reset it the same way you would online. Even at that point if you are so dumb as to not record that information, then I assume at some point you have to consider yourself shit out of luck. Also I do realize you can cahnge the 'magic word' phrase to say 'security question', but I just think its weird that people term it that. I dunno where it came up from :\

02-23-2006, 06:20 PM	#22 (permalink)
Savaal Forum Expert Join Date: Apr 2004 Location: A hole in the wall... Age: 20 Posts: 1,075	Thanks for sharing, The gumps where verry well made, great job! __________________ You know what they say: People in glass houses sink ships.

02-23-2006, 07:04 PM	#23 (permalink)
Packer898 Forum Expert Join Date: Dec 2004 Location: Tulsa, Oklahoma Age: 35 Posts: 2,378