LOM2 -> Security

[EvilEvil]

Ok basicly, ive disabled the ingame account registration, and instead replaced it with an online web account creation, since the username can be broken into with charname and id, i thought of a few things of which i can do to make it more secure, i would like your view on which would be best tho.

So vote away

 

[FUTURA]

Don't try and comlicate it too much, I reckon just keep the user and pass as whatever the person wants, and just urge them to make it different. I guess it's not possible to have a password recovery using secret questions, is it?

 

[MiloFoxburr]

dont go the qgo root It wrecks my head every time i have to copy/paste my username and pass

 

[Jicaa]

I think, you should have an enter'd username, but can be changed with a activation code if so needed

 

[EvilEvil]

lol password aint gonna b random, or should it >=) lol

 

[Skyline]

entered username changeable with code.

Cos when u get hacked ppl feel more safe if they can change username.

 

[EvilEvil]

ok well i think ill start the change username now :P, im just gonna figure out how to make a random activation code and sent via e-mail, or i could do the acti code manually

 

[Primal]

and to make it so 2 accounts dont have the same code

 

[EvilEvil]

just finished the main coding, it now succesfully changes the username,
Enter Username
Enter Activation Code
Enter New Username
Repeat New Username
Submit
Changed

 

[EvilEvil]

ok made it do random activation codes , now to get it to send to their e-mail.

 

[Shard]

I think the QGO way was good when it first came out. Yeah it is annoying but did stop hackings. I think that username type but your own password is a good idea. But I see now you've done it your way and I kinda got confused so I don't know what it does now :P

 

[EvilEvil]

lol all ive done is code the needed stuff, it is very easy to change to any of those above options.

 

[Slaya]

Enter your own username, changeable with activation code, and ditto for password would be a good idea.

 

[Ragnar]

I would go for random username not changable (seeing as there is a program wich memorizes the pass and id for you.