Super Meat Boy leaves database wide open
forums.somethingawful.com
Super Meat Boy leaves database wide open
1–10 of 99 posts
Re: Super Meat Boy leaves database wide open
#2From what I read, the database isn't "wide open". It's read-only and there's nothing juicy in it.
Also, a bit of NSFW stuff going on here if you dig too far.
Edit: It's not read-only, INSERT/UPDATE works.
Re: Super Meat Boy leaves database wide open
#3From what I read, the database isn't "wide open". It's read-only and there's nothing juicy in it. Also, a bit of NSFW stuff going on here if you dig too far. Edit: It's not read-only, INSERT/UPDATE works.
It's not read-only though. He mentions that INSERT and UPDATE work.
http://forums.somethingawful.com/showthread.php?noseen=0&...
This is a really embarrassing mistake on their part.
Re: Super Meat Boy leaves database wide open
#4From what I read, the database isn't "wide open". It's read-only and there's nothing juicy in it. Also, a bit of NSFW stuff going on here if you dig too far. Edit: It's not read-only, INSERT/UPDATE works.
It's not read only, it's read, insert and update.
Re: Super Meat Boy leaves database wide open
#5From what I read, the database isn't "wide open". It's read-only and there's nothing juicy in it. Also, a bit of NSFW stuff going on here if you dig too far. Edit: It's not read-only, INSERT/UPDATE works.
It's not read-only though. He mentions that INSERT and UPDATE work. http://forums.somethingawful.com/showthread.php?noseen=0&... This is a really embarrassing mistake on their part.
Ah, missed that.
Re: Super Meat Boy leaves database wide open
#6From what I read, the database isn't "wide open". It's read-only and there's nothing juicy in it. Also, a bit of NSFW stuff going on here if you dig too far. Edit: It's not read-only, INSERT/UPDATE works.
Sorry, if you read the page linked you'd see that that is not the case. It is open to SELECT, UPDATE, and INSERT. if it were SELECT only that would be read-only.
As it is, that's just stupid as any user can wantonly edit anything. I could trivially edit every level's author to be myself or do intensive operations which result in a DOS.
The only smart way to give clients access to a database is through some sort of frontend entirely under your control which prevents them from having the user/pass and sanitizes the queries.
Edit: Whoops, while I typed this multiple other people did the same. Sorry for the redundancy.
Re: Super Meat Boy leaves database wide open
#7From what I read, the database isn't "wide open". It's read-only and there's nothing juicy in it. Also, a bit of NSFW stuff going on here if you dig too far. Edit: It's not read-only, INSERT/UPDATE works.
Sorry, if you read the page linked you'd see that that is not the case. It is open to SELECT, UPDATE, and INSERT. if it were SELECT only that would be read-only. As it is, that's just stupid as any user can wantonly edit anything. I could trivially edit every level's author to be myself or do intensive operations which result in a DOS. The only smart way to give clients access to a database is through some sort of fr…
Yes, I replied to my comment and even updated the original comment indicating that I was incorrect.
Re: Super Meat Boy leaves database wide open
#8The idea of doing an UPDATE on the custom levels table every time someone dies in order to increment the deaths counter terrifies the database administrator in me. That'll scale REAL well. Yikes.
Re: Super Meat Boy leaves database wide open
#9From what I read, the database isn't "wide open". It's read-only and there's nothing juicy in it. Also, a bit of NSFW stuff going on here if you dig too far. Edit: It's not read-only, INSERT/UPDATE works.
Sorry, if you read the page linked you'd see that that is not the case. It is open to SELECT, UPDATE, and INSERT. if it were SELECT only that would be read-only. As it is, that's just stupid as any user can wantonly edit anything. I could trivially edit every level's author to be myself or do intensive operations which result in a DOS. The only smart way to give clients access to a database is through some sort of fr…
> The only smart way to give clients access to a database is through some sort of frontend entirely under your control which prevents them from having the user/pass and sanitizes the queries.
MySQL maybe, but enterprise DBs (think Oracle, DB2, Postgres) support a very fine-grained access model.
Re: Super Meat Boy leaves database wide open
#10I found this image succinct and telling: http://img820.imageshack.us/img820/1641/itsfinetrustme.png
