forums.rs

Forums

Prevent forum logout bc game

Quick find code: 278-279-429-66197583

Kopaka
Dec Member 2023

Kopaka

Posts: 3,578 Adamant Posts by user Forum Profile RuneMetrics Profile
Pretty simple concept:

When the game is running, it makes a temporary file in /appdata or whatever, which so long as that file exists, the forum checks for it and won't log you out.

What this does is allow me to play the game and not constantly jump back and forth to the forums to prevent logout, and then when I want to look up something on the forum or post an idea, I don't have to log in again.

In order to prevent abuse, the game can update/recreate the temp file with a new code every 15 minutes. The code is generated using a similar algorithm as 2-step authentication, which gets verified by the website.

10-Jan-2021 00:14:31

YtHaar-Mej
Dec Member 2005

YtHaar-Mej

Posts: 24,670 Opal Posts by user Forum Profile RuneMetrics Profile
Interesting concept but it wouldn't be possible to achieve.

Aside from the fact that the forums (or any other site module for that matter) do not control or manage your login session at all, that's a site-wide thing managed through it's own system.....websites are not able to access files on your computer.

The only thing remotely possible would be javascript, but web browsers don't allow access to your files unless you upload one through an input[type=file]....or if the db/cookie expires before the script can load, rendering it useless anyway. Can I turn in a paper without citing all sources?
"No."[1]
1. William Shakespeare, Hamlet , Act III, Scene 1, line 96.

10-Jan-2021 02:01:01

2_Tron

2_Tron

Posts: 22,959 Opal Posts by user Forum Profile RuneMetrics Profile
Nope, what it does at the moment isn't creating any hassle for me as a player and I shouldn't be continously being hooked onto The RSOF if I don't see a reason to use it.
Being logged in into The RSOF "
isn't a must
" it has to to be a possiblity if I do want to. Again it isn't a must.

10-Jan-2021 12:04:46

Kopaka
Dec Member 2023

Kopaka

Posts: 3,578 Adamant Posts by user Forum Profile RuneMetrics Profile
YtHaar-Mej said :
... Websites are not able to access files on your computer.

...or if the db/cookie expires before the script can load, rendering it useless anyway.
To the first point: What about cookies? Don't they get stored on your computer? Also SSL certificates?

To the second point: I don't quite understand what you are saying here. Are you saying the cookie will always expire before the script runs? I don't know a lot about cookies but couldn't the script be programmed to run at a rate which would check the cookie and renew it before it expired?


2_Tron said :
Nope, what it does at the moment isn't creating any hassle for me as a player and I shouldn't be continously being hooked onto The RSOF if I don't see a reason to use it.
Being logged in into The RSOF "
isn't a must
" it has to to be a possiblity if I do want to. Again it isn't a must.
Refreshing to be reminded that since it doesn't bother you therefore nobody else is allowed to have a different opinion!

11-Jan-2021 02:20:28

YtHaar-Mej
Dec Member 2005

YtHaar-Mej

Posts: 24,670 Opal Posts by user Forum Profile RuneMetrics Profile
Kopaka said :
To the first point: What about cookies? Don't they get stored on your computer? Also SSL certificates?
Cookies are stored on the computer but they're part of the application, it's similar to the browser saving a setting or extension. It still cant access anything outside of the application on its own.

And SSL certs just encrypt data that's sent and block anything not secure. It helps but wont change anything in this case.

Kopaka said :
To the second point: I don't quite understand what you are saying here. Are you saying the cookie will always expire before the script runs? I don't know a lot about cookies but couldn't the script be programmed to run at a rate which would check the cookie and renew it before it expired?
If the website has the session as well on its end, if it expires....your cookie is invalid regardless of if it's extended or not. That's how there's the inactive logout.

There's definitely something with that on the server side because of the /c=code/ parameter, as well as the old /p=stuff/s=stuff/ if you didnt have cookies enabled.

So even if you could access a file with javascript, there's nothing to post it to the server to extend anything on that side...and would even be a mess updating the session variable in the url afterwards as well....as if the session changes at all, the old one is useless. Can I turn in a paper without citing all sources?
"No."[1]
1. William Shakespeare, Hamlet , Act III, Scene 1, line 96.

11-Jan-2021 03:37:29

Kopaka
Dec Member 2023

Kopaka

Posts: 3,578 Adamant Posts by user Forum Profile RuneMetrics Profile
From how you write, it sounds like you know what you are writing about.

I must admit I do not.

But, forgive me this further ignorant conjecture:

The game has data about the player saved on the server. Things like XP, location, membership status, items in bank, etc. No need to list everything, especially since I probably can't even guess it all. Point being for saying so, that data is not stored on the client side.

The website has access to that data. It has a highscores. There is also Runemetrics, which gives fairly detailed information about account activity. From my brief reading on the Wiki, it seems that Runemetrics is updated about your activity every 5 minutes.

I cannot claim to know the difference between Runemetrics knowing I just gained 50k smithing XP and Runescape.com/m=forum knowing I am currently logged into the game, but it really does not sound that different to me as a layman.

Can you explain why Runemetrics couldn't just keep me logged in if I gained some XP in the last 5 minutes?

11-Jan-2021 06:23:54

2_Tron

2_Tron

Posts: 22,959 Opal Posts by user Forum Profile RuneMetrics Profile
Kopaka said :
... 2_Tron said :
Nope, what it does at the moment isn't creating any hassle for me as a player and I shouldn't be continously being hooked onto The RSOF if I don't see a reason to use it.
Being logged in into The RSOF "
isn't a must
" it has to to be a possiblity if I do want to. Again it isn't a must.
Refreshing to be reminded that since it doesn't bother you therefore nobody else is allowed to have a different opinion! I think you do need to think it over what you wrote as you did totally respond off the mark, about what I wrote.

15-Jan-2021 09:06:43

Quick find code: 278-279-429-66197583 Back to Top