MNoya / Element-TD

Element Tower Defense
http://www.eletd.com
64 stars 22 forks source link

Bad highscores #475

Closed ynohtna92 closed 7 years ago

ynohtna92 commented 7 years ago

How did these two get through?

http://hatinacat.com/leaderboard/matches/2718969418

http://www.eletd.com/leaderboard/matches/2789765035

The second one doesn't resolve a steam profile so I am guessing that he spoofed it somehow and it got through the whitelist.

ynohtna92 commented 7 years ago

@WindStrike72 You also need to mention me in the commit when you change the version. Because I need to update hatinacat.com/leaderboard which is where the in-game leaderboard info comes from.

biax commented 7 years ago

I am guessing there's some certain combination of options in this flaw.

Chaos mode seem consistently involved. Since quite often the games involve multiple players, I'm pretty sure the host enabled cheats before launching. Is it possible for the host to leave and pass being the host to another player? Or perhaps... -restart- the game via sandbox button?

ynohtna92 commented 7 years ago

Can someone confirm if the top highscores on the current leaderboard are legitimate so I may set them to cheat if necessary.

biax commented 7 years ago

All high scores with waves 80 and above are wrong.

They all have one thing in common. Chaos Rush. (I have seen some without rush though)

On 2017-01-28 12:57, ynohtna92 wrote:

Can someone confirm if the top highscores on the current leaderboard are legitimate so I may set them to cheat if necessary.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/MNoya/Element-TD/issues/475#issuecomment-275827639, or mute the thread https://github.com/notifications/unsubscribe-auth/AOdsCninMO-iEG7dgt7l7Cxzs-YG2CzFks5rWsrOgaJpZM4K3b7w.

biax commented 7 years ago

I should also add that, breaking wave 70 is insanely difficult even in normal mode. (my highest so far is wave 71).

On 2017-01-28 12:57, ynohtna92 wrote:

Can someone confirm if the top highscores on the current leaderboard are legitimate so I may set them to cheat if necessary.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/MNoya/Element-TD/issues/475#issuecomment-275827639, or mute the thread https://github.com/notifications/unsubscribe-auth/AOdsCninMO-iEG7dgt7l7Cxzs-YG2CzFks5rWsrOgaJpZM4K3b7w.

WindStrike72 commented 7 years ago

Another thing to note about cheated highscores - each frog wave is 30 frogs, so wave 80 w/ 50 frogs = hahahahah nope.avi

Guess a way to auto-prune these would be to detect if it's Wave 70 or higher, and then if it's less than 400 frog kills, gudbye cheaters. I would say to prune by score, but as proven with my skills on the mobile version, I'm not the best player and even with theorycrafting, someone might find a way to break 2 mil w/o cheating.

ynohtna92 commented 7 years ago

WindStrike72, if you have access to the phpmyadmin or SQL server you can use this to search matches on the leaderboard and then edit and set cheat to '1'.

SELECT * FROM `player_data` WHERE `matchID` = 2967364750

I will be adding an admin page to leaderboard to make this easier to do in future.

Have you watched any replays of these games to understand the exploit they are using?

ynohtna92 commented 7 years ago

A manage page will be pushed soon to hatinacat.com to allow easy management of highscores. Follow the eletd leaderboard github for more info. image

ynohtna92 commented 7 years ago

@WindStrike72 Would the following formula be suitable on classic for rush and other modes?' If wave >= 55 and ((wave - 55) * 30 >= frogs) then cheat = 0 else cheat = 1 endif

biax commented 7 years ago

short mode needs to be considered also, i've not tested scoring on short mode as of yet. actually, to keep things simple, lets disable scoring for short mode. for one thing, short mode shouldn't be accounted in classic mode. it should either have its own scoring, or better yet, not at all... it is short mode after all, not some "challenging" mode.

On 2017-02-28 16:10, ynohtna92 wrote:

@WindStrike72 https://github.com/WindStrike72 Would the following formula be suitable on classic for rush and other modes?' |If wave >= 55 and ((wave - 55) * 30 >= frogs) then cheat = 0 else cheat = 1 endif|

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/MNoya/Element-TD/issues/475#issuecomment-282971173, or mute the thread https://github.com/notifications/unsubscribe-auth/AOdsCo8BziVOydZMYdceW63em4bZjkOdks5rg9Z2gaJpZM4K3b7w.

ynohtna92 commented 7 years ago

You mean express mode? What is short mode?

biax commented 7 years ago

screenshot_102