These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

EVE Technology Lab

 
  • Topic is locked indefinitely.
 

How?? Eve Uni Forum Registration In-game browser
Author
Previous Topic Next Topic
Logix42
Taxation Damnation
#1 - 2012-10-17 04:05:19 UTC
I'd like to create a login system similar to how Eve Uni gets people to register for their forums. Specifically how they verify characters through the ingame browser. I have done a search on the Eve forums and on the E-Uni forums and didn't find anything.

I'd really appreciate if someone could point me in the direction of some documentation / reading so I can learn how to do this.

It would be really amazing to talk to the person who made the E-Uni login system but I don't know who that is or if they'd have time.

Go beyond the edge of space... Explore
Acid Kanshi
AIFAM
#2 - 2012-10-17 05:49:45 UTC
http://wiki.eveonline.com/en/wiki/IGB_Headers

EVE-Cost is a manufacturing tool for EVE players. http://www.eve-cost.eu
Steve Ronuken
Fuzzwork Enterprises
Vote Steve Ronuken for CSM
#3 - 2012-10-17 10:17:57 UTC
Please bear in mind, all the headers are spoofable.

And easily so.

Woo! CSM XI!

Fuzzwork Enterprises

Twitter: @fuzzysteve on Twitter
Logix42
Taxation Damnation
#4 - 2012-10-17 15:28:43 UTC
Acid kanshi thank you for the link

If the headers are spoofable I wonder why eve uni uses this for registering on their forums, or maybe they have found some way to verify?

Go beyond the edge of space... Explore
Steve Ronuken
Fuzzwork Enterprises
Vote Steve Ronuken for CSM
#5 - 2012-10-17 16:14:25 UTC
Logix42 wrote:
Acid kanshi thank you for the link

If the headers are spoofable I wonder why eve uni uses this for registering on their forums, or maybe they have found some way to verify?


Possibly. Or they figure the window of opportunity is small enough not the be a problem.


Pretty much /anything/ a client gives you is up for suspicion. Something like OAUTH gets round the problem by having you get the actual details from trusted server, by a hash key the client gives you. As it's 'random' the chance of a collision is low enough to be ignorable.

Woo! CSM XI!

Fuzzwork Enterprises

Twitter: @fuzzysteve on Twitter
Nutbolt
University of Caille
Gallente Federation
#6 - 2012-10-17 20:16:30 UTC
http://www.eve-bb.com/ Uses API keys to verify, and can automatically remove uses should they leave the corp. It doesn't require many permissions for the paranoid users.

Here is my guide to registering on our forums (running EVEBB), so you get an idea of what the process is like.

Join Avalon Project Today!