Page 1 of 3

[rls]Forge Share v2

Posted: Sat Aug 16, 2008 1:21 pm
by superaison

Code: Select all

http://www.haloelites.org/Forge%20Share%20v2.rar
Bunch of features, too many to list, this is in beta v2, i figured after about 2000 lines(yes, its efficiant), I should atleast see what the community thinks.

Preview picture:
Image


Features I will add:

* Auto Resigning on download
* Auto Transfer to hdd(this will be dead last)
* Read from hdd(this may be in next release =])
* Maybe film + picture support(lol?)
* Gametype previews...i dont think its necessary though.

Please provide constructive criticism.



Thanks,


-Roger

Posted: Sat Aug 16, 2008 1:47 pm
by Eaton
Very cool idea. :)

Posted: Sat Aug 16, 2008 2:08 pm
by JK-47
Indeed it is.

Posted: Sat Aug 16, 2008 2:44 pm
by SPARTAN-OMEGA
Nice work, again

Posted: Sat Aug 16, 2008 2:50 pm
by snakejknight
Very cool! I really like it... I have 2 suggestions...

1. Add an automatic map ID number system so that people can go directly to the map for dl (and post the number in forums)

2. Add in a con resigner... during first launch a user imputs his profile and console id's and from then on out all he has to do is download and play.

Posted: Sat Aug 16, 2008 2:56 pm
by shadowkhas
snakejknight wrote:1. Add an automatic map ID number system so that people can go directly to the map for dl (and post the number in forums)
Building off of that, a cool feature would be to implement a system where users can click links in web pages, and it'll take them to a program and download the file automatically. Like how there's "itms://" links to the iTunes Music Store, but "forge://" or something. :P

Posted: Sat Aug 16, 2008 3:34 pm
by superaison
Haha, great ideas, though very tricky.

We will have logins if it gets popular next release.

And each map will probably have a special ID, people can post that ID and then they can just goto that ID in the program. That's next release=]

Posted: Sat Aug 16, 2008 3:48 pm
by Zora
Very neat program, keep it coming!

Posted: Sat Aug 16, 2008 4:24 pm
by snakejknight
so just to help out i am uploading canvas maps... i accidentally named one "canvas" so no one has any idea on which map it is... mb an info panel, or a way to delete maps that you upload?

Posted: Sun Aug 17, 2008 6:11 am
by THE-MASTER
Interesting. At the moment though it is a bit vulnerable to spam and rubbish I would say unless you have some way of checking that they are forge maps. I think this is a good idea but could be better if it was just all on a website so that you don't have to download a programme.

Also could it not just read the description and file name from the map?

You have actually just released the most insecure app I have ever seen in my life. I did a small bit of reverse engineering (opened in a hex editor) and I have full access to your whole site... Remove this app as fast as you can or change your ftp password...

Posted: Sun Aug 17, 2008 6:58 am
by Crofty
The reason this application is not on a website is because its content could or is classed as illegal, i also know the application is very insecure but thats why its in beta stage. There are always people who will try and decompile applications and on that note the application has been much updated since this current release, i always assumed someone would decompile the application and look through its settings and find the ftp information thats why the application no longer uses that way to store the information.

##Current Updates in Next Release##

- Login & Register
- My Uploads Section
- Search by map id
- Full banning system in effect
- Many Bugs Fixed

Posted: Sun Aug 17, 2008 7:09 am
by THE-MASTER
Crofty wrote:The reason this application is not on a website is because its content could or is classed as illegal, i also know the application is very insecure but thats why its in beta stage. There are always people who will try and decompile applications and on that note the application has been much updated since this current release, i always assumed someone would decompile the application and look through its settings and find the ftp information thats why the application no longer uses that way to store the information.

##Current Updates in Next Release##

- Login & Register
- My Uploads Section
- Search by map id
- Full banning system in effect
- Many Bugs Fixed
Yeah but the files are still stored on your server. Making it a downloadable file doesn't make it any less illegal (even if it is illegal which I'm not so sure about). Why would you release an app that gives someone full access to delete the content of your whole site? Or worse upload viruses to the forge share folder so that people are downloading viruses. It is putting users at risk too. If you are going to use ftp to upload, make another ftp user with limited access or make a subdomain with limited access.

Release the current version then and remove this one as quickly as you can.

Posted: Sun Aug 17, 2008 7:40 am
by Crofty
The Ftp access was removed long ago, before many people had time to figure out this exploit, even if the had gained access to the ftp server and uploaded files there still was no way they could get them links into the application.

Posted: Sun Aug 17, 2008 8:06 am
by THE-MASTER
Crofty wrote:The Ftp access was removed long ago, before many people had time to figure out this exploit, even if the had gained access to the ftp server and uploaded files there still was no way they could get them links into the application.
You mean you couldn't edit the getInfo file? It has not been removed. In the current version that you can download here it still has the information.

Posted: Sun Aug 17, 2008 8:14 am
by Crofty
That so called file is a dynamic file, the info being being displayed is from a mysql database.

Posted: Sun Aug 17, 2008 8:17 am
by superaison
Did I not say I do not approve of decompiling? You have no right to be decompiling this program.

Posted: Sun Aug 17, 2008 8:25 am
by THE-MASTER
Crofty wrote:That so called file is a dynamic file, the info being being displayed is from a mysql database.
If you look at my sig I think you will realise I know what a php file is and also how to write them and edit them.
superaison wrote:Did I not say I do not approve of decompiling? You have no right to be decompiling this program.
I didn't decompile it. I opened it in a hex editor... That is just how insecure it is.

Posted: Sun Aug 17, 2008 8:27 am
by SPARTAN-OMEGA
Encrypt it next time? Theres an anti decompiler crypter out there. Im not being a jerk, Im just suggesting you encrypt it.

Posted: Sun Aug 17, 2008 3:00 pm
by snakejknight
guys its just a beta... if you are afraid to use it simply... DON'T

Its a great idea... i wish something like this had come out for halo 2... Sure it needs to be refined but he already said he was doing that... what more do you want?

Anyway to the creator... I have another suggestion. In addition to the con resigner i had suggested previously, have it auto name the usermap name. Meaning instead of usermap0002032203902 have it change the numbers to usermapMapNameHere

ooooo and an auto download option into your maps folder. Picture this, i come home from work and wanna try something new. I don't wanna search the web all i want to do is open up a folder and drag maps that are ready to go into my mem card or hdd and play. YOU CAN MAKE MY DREAM A REALITY!

;) great app

Posted: Sun Aug 17, 2008 3:18 pm
by superaison
Updated.

Check first post.