Shifthappens Posted July 30, 2013 Share Posted July 30, 2013 Okay so here's my situation. I'm working on a tool to host a server for clients to send information to via autoit. The PC running the server will also be hosting a minecraft server. It's basically to simplify commands. Here's where my issue arises. As we know, autoit is very easy to decompile, and if someone was to decompile the script, they would be able to send data to the server for servers that they aren't supposed to be able to access. Is there any way it is possible to have a script load a script sent through my server and run it so that the .au3 can't be accessed to be decompiled or is this not possible? Also, before it is suggested, I already know about obfuscation, I just prefer not to go that route. Thanks, and if this doesn't make sense please let me know and i'll try to clarify any confusion. Link to comment Share on other sites More sharing options...
iamtheky Posted July 30, 2013 Share Posted July 30, 2013 I cant think of a way you could "send" this file that would make it difficult to capture. Also, is there a reason everything else is exposed in the script and why simplifying commands couldnt be done purely on the client side with their existing connection settings? If we are going into the grey area of game interaction might as well do so with both feet. ,-. .--. ________ .-. .-. ,---. ,-. .-. .-. .-. |(| / /\ \ |\ /| |__ __||| | | || .-' | |/ / \ \_/ )/ (_) / /__\ \ |(\ / | )| | | `-' | | `-. | | / __ \ (_) | | | __ | (_)\/ | (_) | | .-. | | .-' | | \ |__| ) ( | | | | |)| | \ / | | | | | |)| | `--. | |) \ | | `-' |_| (_) | |\/| | `-' /( (_)/( __.' |((_)-' /(_| '-' '-' (__) (__) (_) (__) Link to comment Share on other sites More sharing options...
Moderators Melba23 Posted July 30, 2013 Moderators Share Posted July 30, 2013 boththose, the grey area of game interactionNothing even remotely grey about that subject in this forum. M23 Any of my own code posted anywhere on the forum is available for use by others without any restriction of any kind Open spoiler to see my UDFs: Spoiler ArrayMultiColSort ---- Sort arrays on multiple columnsChooseFileFolder ---- Single and multiple selections from specified path treeview listingDate_Time_Convert -- Easily convert date/time formats, including the language usedExtMsgBox --------- A highly customisable replacement for MsgBoxGUIExtender -------- Extend and retract multiple sections within a GUIGUIFrame ---------- Subdivide GUIs into many adjustable framesGUIListViewEx ------- Insert, delete, move, drag, sort, edit and colour ListView itemsGUITreeViewEx ------ Check/clear parent and child checkboxes in a TreeViewMarquee ----------- Scrolling tickertape GUIsNoFocusLines ------- Remove the dotted focus lines from buttons, sliders, radios and checkboxesNotify ------------- Small notifications on the edge of the displayScrollbars ----------Automatically sized scrollbars with a single commandStringSize ---------- Automatically size controls to fit textToast -------------- Small GUIs which pop out of the notification area Link to comment Share on other sites More sharing options...
Shifthappens Posted July 30, 2013 Author Share Posted July 30, 2013 I cant think of a way you could "send" this file that would make it difficult to capture. Also, is there a reason everything else is exposed in the script and why simplifying commands couldnt be done purely on the client side with their existing connection settings? If we are going into the grey area of game interaction might as well do so with both feet. I think I may be able to make it so nothing would be exposed in terms of player's rewriting/abusing the client but the only issue i'm seeing is in the case that I fail to fullproof the system I wanted to know if it was possible that I could just had done this method with the file being sent/ran but not be accessed outside of that(for decompiling). I appreciate your responses though. Thanks for taking the time to read. Link to comment Share on other sites More sharing options...
Moderators Melba23 Posted July 30, 2013 Moderators Share Posted July 30, 2013 Shifthappens,I was obviously too oblique in my earlier post, so let me ask a direct question: are you asking for help with a script that involves interaction with the Minecraft game or the Minecraft game server in relation to gaming? Your initial comment "the server will also be hosting a minecraft server" is a little ambiguous - please clarify exactly what you want this script to do. M23 Any of my own code posted anywhere on the forum is available for use by others without any restriction of any kind Open spoiler to see my UDFs: Spoiler ArrayMultiColSort ---- Sort arrays on multiple columnsChooseFileFolder ---- Single and multiple selections from specified path treeview listingDate_Time_Convert -- Easily convert date/time formats, including the language usedExtMsgBox --------- A highly customisable replacement for MsgBoxGUIExtender -------- Extend and retract multiple sections within a GUIGUIFrame ---------- Subdivide GUIs into many adjustable framesGUIListViewEx ------- Insert, delete, move, drag, sort, edit and colour ListView itemsGUITreeViewEx ------ Check/clear parent and child checkboxes in a TreeViewMarquee ----------- Scrolling tickertape GUIsNoFocusLines ------- Remove the dotted focus lines from buttons, sliders, radios and checkboxesNotify ------------- Small notifications on the edge of the displayScrollbars ----------Automatically sized scrollbars with a single commandStringSize ---------- Automatically size controls to fit textToast -------------- Small GUIs which pop out of the notification area Link to comment Share on other sites More sharing options...
Shifthappens Posted July 30, 2013 Author Share Posted July 30, 2013 (edited) Shifthappens, I was obviously too oblique in my earlier post, so let me ask a direct question: are you asking for help with a script that involves interaction with the Minecraft game or the Minecraft game server in relation to gaming? Your initial comment "the server will also be hosting a minecraft server" is a little ambiguous - please clarify exactly what you want this script to do. M23 It is going to be interacting with the SERVER, there will be NO INTERACTION WITH THE MINECRAFT GAME. Here is an image to help explain what i'm making. As it is in the game, if I wanted to spawn for example, a Wooden Pickaxe/Axe/Hoe/Sword/Shovel, I would have to type in the following commands /Give <playername> 290 /give <Playername> 268 /give <Playername> 270 /give <Playername> 271 /give <Playername> 269 With my program though, I'll be able to just check the quality of the item I want + the specific items I want and click a button, the script will then send the commands through the server prompt. Does this make more sense? Edit: What I meant by the server will also be hosting a minecraft server. I will be running a server.au3 program for other clients to connect to spawn items on the server/do administrator commands. They will download a client.au3 program to connect to the server and it will be what is displayed in the image after they log in. Edit2: I have no difficulty in making the program do what I want. I just wanted clarification that it's not possible to hide the .au3 source for the client to make it unmodifiable. Edited July 30, 2013 by Shifthappens Link to comment Share on other sites More sharing options...
Moderators Melba23 Posted July 30, 2013 Moderators Share Posted July 30, 2013 Shifthappens, I have no difficulty in making the program do what I wantGood, because you would have received no help had you required it. I just wanted clarification that it's not possible to hide the .au3 source for the client to make it unmodifiableAs long as the thread remains limited to that topic alone I am happy to leave it open. M23 Any of my own code posted anywhere on the forum is available for use by others without any restriction of any kind Open spoiler to see my UDFs: Spoiler ArrayMultiColSort ---- Sort arrays on multiple columnsChooseFileFolder ---- Single and multiple selections from specified path treeview listingDate_Time_Convert -- Easily convert date/time formats, including the language usedExtMsgBox --------- A highly customisable replacement for MsgBoxGUIExtender -------- Extend and retract multiple sections within a GUIGUIFrame ---------- Subdivide GUIs into many adjustable framesGUIListViewEx ------- Insert, delete, move, drag, sort, edit and colour ListView itemsGUITreeViewEx ------ Check/clear parent and child checkboxes in a TreeViewMarquee ----------- Scrolling tickertape GUIsNoFocusLines ------- Remove the dotted focus lines from buttons, sliders, radios and checkboxesNotify ------------- Small notifications on the edge of the displayScrollbars ----------Automatically sized scrollbars with a single commandStringSize ---------- Automatically size controls to fit textToast -------------- Small GUIs which pop out of the notification area Link to comment Share on other sites More sharing options...
JohnOne Posted July 30, 2013 Share Posted July 30, 2013 Does a client not have to be on the client side? I'm a bit confused here, if so, then there is no way to hide it. AutoIt Absolute Beginners Require a serial Pause Script Video Tutorials by Morthawt ipify Monkey's are, like, natures humans. Link to comment Share on other sites More sharing options...
Shifthappens Posted July 30, 2013 Author Share Posted July 30, 2013 Does a client not have to be on the client side? I'm a bit confused here, if so, then there is no way to hide it. The client must be ran client side. Here was what I was wondering. Is it possible that the client side login .au3 could receive a seperate .au3 to load/run from the server once the user has successfully logged in but without the user being able to access the file otherwise? Link to comment Share on other sites More sharing options...
JohnOne Posted July 31, 2013 Share Posted July 31, 2013 Maybe AutoIt3ExecuteScript command line is what your're after. Or just Execute() AutoIt Absolute Beginners Require a serial Pause Script Video Tutorials by Morthawt ipify Monkey's are, like, natures humans. Link to comment Share on other sites More sharing options...
blckpythn Posted July 31, 2013 Share Posted July 31, 2013 You could have the main .au3 file on an FTP server or something and have a seperate "client" script that first copies it locally before executing as JohnOne suggested, then delete before exit. This would make updates easier as well. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now