search

gsx95 / georgguessr

An open source clone of Geoguessr that can be hosted serverless for free in your AWS account
3 stars 0 forks source link

only room creator should be able to post positions #7

Closed gsx95 closed 3 years ago

gsx95 commented 3 years ago

currently, the room creator is redirected to "/createRoom", on which the client generates streetview positions and posts them to the backend. We are not making sure that only the creator can post those positions, so anyone who knows a game ID that is in creation (and gets the timing right) can cheat.

gsx95 commented 3 years ago

Maybe find a way to generate streetview positions in the backend

gsx95 commented 3 years ago

Can be closed if #18 is implemented

gsx95 commented 3 years ago

18 implemented