Simple LoginServer

I posted a while ago helping two individuals with some loginserver information.

Today when I looked in my email, it turned out that a bunch of people wanted to have some examples on how it would look like.

I'm by no means a programmer, I'm merely trying to learn script and some C++ while I'm here doing some art for our project.
The following will be code snippits and comments. Recommendations and modifications are very welcome!

I also want to say thank you to John Vanderbeck, Peter Andersson, Melvyn May, Phil Carlisle, Ben Garney, Gerald Fishel and Matthew Fairfax for making this possible.

I consider this abit help I can give back to the community for so much you have helped me, at least I hope so.

This is my first resource and I really feel it's difficult for me to get everything simple, so that everyone else understands; but I'll try to be as clear as possible. Additionally, anyone can contact me or post here if they want help.
Puh, that's alot. Let's start.

____________________________________________

I want to point out that you need some basic knowledge of TorqueScript to pull this off, and be fairly oriented in mySQL.
If you haven't got mySQL in TGE yet, please consult this link.

To start with, you'll need a logindialog of some kind. Mine had two editboxes (username & password) and two buttons (proceed & cancel).

The two editboxes were tied to two strings in the client/prefs.cs script, so let's add them there.

$pref::Username = "Stefan";
$pref::Password = "Blaha";

Save the modifications to the file and proceed to your loginscript or dialog, and add these two to your editboxes.
For instance.

new GuiTextEditCtrl() {
         profile = "GuiTextEditProfile";
         horizSizing = "right";
         vertSizing = "bottom";
         position = "82 83";
         extent = "130 18";
         minExtent = "8 8";
         visible = "1";
         variable = "$pref::Password";
         maxLength = "255";
         historySize = "0";
         password = "1";
         tabComplete = "0";
         sinkAllKeyEvents = "0";
            helpTag = "0";
      };

Do the same with the username field, but change the variable.

Now make a button or whatever you'd like to execute a simple command.
It sends the username & password fields to the server and tells it to "check" them.

new GuiBitmapButtonCtrl() {
         profile = "GuiDefaultProfile";
         horizSizing = "right";
         vertSizing = "bottom";
         position = "287 28";
         extent = "80 27";
         minExtent = "8 2";
         visible = "1";
         command = "commandToServer('LoginCheck', $pref::Password, $pref::Username);";
         lockMouse = "0";
         bitmap = "~/sprites/gui/probutton01.png";
         HighlightBitmap = "~/sprites/gui/probutton01.png";
         PressedBitmap = "~/sprites/gui/probutton02.png";
         wrap = "0";
      };

You *should* store the strings each time, at least the username. I won't go into detail about that here though.

The server does not know what to do with the command or what it means, so let's make it "understand".
In server/scripts/login.cs (which you will need to create).

function ServerCmdLoginCheck(%client, %AuthPass, %AuthUser)
{

	%login= new MySQL();

	%login.host= "localhost";
	%login.port= 3306;

	// user information

	%login.user= "administrator";
	%login.pwd= "whatever";

	// connection flags

	%login.flag_compress= false;
	%login.flag_ssl= true;

	// database to use

	%login.db= "mygame";

	// ----------------------------------------------------
	// echo

	%login.ValidateSettings();
	
	%login.Connect();

    %login.Query ("SELECT * FROM myusers WHERE Username=\"" @ %AuthUser @ "\" AND Password = \"" @%AuthPass @ "\"");

	%result= %login.StoreResult();
    if (%login.NumRows (%result) > 0)
    {
       echo("Access Granted");
       commandToClient(%client, 'Login');
}

    if (%login.NumRows (%result) < 1)
    {
       echo("             ");
       echo("Access Denied");
       echo("             ");
       commandToClient(%client, 'LoginFailed');
}

	%login.FreeResult(%result);
	%login.Close();
}

The function will bind the two pref.cs strings to %AuthUser and %AuthPass on the server.
It will then validate and log you in to your mySQL server. Open up your database and Select from all rows where username and password is the ones supplied with the strings from the client.
It will only work if the username and password is in the same row and they are identical to the database's stored ones.

IF the database returns a row where it has a match, it will send you back a logincall.
IF the database does not return a value, it will send loginfailed to the client.

You will need to make a command on the client that responds to these calls, or place whatever code inbetween that you need.

The above can be done in one command using a variable instead, but I haven't done that in this version of the loginscript.
Also, you SHOULD log/call something on the server when the client get's authed, or whenever she types the correct information.

____________________________________________

I have done it the way that I'm logging the IP number and setting a flag to "true" which the gameserver checks each time the client logs in.
Also, to avoid misuse of the mySQL commands I've made scripts on the server and the client that both forbid certain words and spaces in the editbox fields.
I think this is very important.

The full code for that is a bit long and it would take too long to include here right now.

Something I did as well was to rip out the terrain, most of the GUI, audio and interior code to make it "impossible" to hack the server.. if you only want it to be a loginserver, that is ;)
Then keep the binary seperate from the normal gameservers.

If the user modifies the strings while the session is running on a gameserver, the server might want to disconnect the user and log the event somewhere.
That's all that I did right now.
Make sure the new server/scripts/login.cs script is executed on server startup.

____________________________________________

I really hope this says something and that it gives you a clue, if it does not.. make sure to point it out for me and I'll see what I can do :)
There are also a bunch of very helpful members out there that might have improvements and/or suggestions so keep checking back.

I'll edit this post with updates if/when there are any.

Sincerely
Stefan Lundmark