Verify uploaded high scores to prevent cheating

[GoogleCodeExporter]

There are bogus highscores uploaded to the master server. slajoie had a way
of verifying them, maybe we could have an automated way of doing so?

Maybe we should put posted highscores in a queue, and have a daily job to
verify them and move them to the highscores list.

Original issue reported on code.google.com by pphaneuf on 18 Mar 2008 at 6:20

[GoogleCodeExporter]

Original comment by pphaneuf on 18 Mar 2008 at 6:28

• Changed state: New

[GoogleCodeExporter]

Thumbs down on the queue and daily job. It would be simpler and more efficient 
to 
simply verify demo files as they are posted to qserv.pl (in do_postdemo).

There's a -verify <demofile> commandline option that plays a demo recording 
very 
fast. Combined with -novideo, it could be used as a basis to implement this 
feature 
request. What's missing is a mechanism for reporting the result of the 
verification 
to a calling script so that the whole thing can be automated.

Option 1: grab the packet that contains the game result at the end of the 
recording 
and compare to the actual result from playing it back. Return a status code 
from 
main. In qserv.pl, extract that same packet (using RecReader.pm) and use the 
info to 
rank the recording (instead of the unverified information provided by the 
client in 
$params).

Option 2: print the game result to stdout and compare that to the information 
provided by the client ($params). Reject any demo that doesn't match.

The first option is a little bit more work but feels a bit cleaner.

Original comment by slaj...@gmail.com on 18 Mar 2008 at 8:25

[GoogleCodeExporter]

Original comment by slaj...@gmail.com on 18 Mar 2008 at 9:33

• Changed title: Verify uploaded high scores to prevent cheating
• Changed state: Accepted

[GoogleCodeExporter]

Started work on this.

Original comment by slaj...@gmail.com on 19 Mar 2008 at 12:42

[GoogleCodeExporter]

I added a comment from RZ***Brandon on issue #7 which might have to do with 
this.

Original comment by pphaneuf on 19 Mar 2008 at 2:13

[GoogleCodeExporter]

Original comment by slaj...@gmail.com on 19 Mar 2008 at 4:35

• Changed state: Started