forked from 0ad/0ad
wraitii
113fefeeb7
The 'controller' of an MP game (the host in general, though dedicated
servers would change that) is currently whoever first tells the server
that it is. This can be abused since it relies on trusting the clients.
This changes that logic: the server defines a 'controller secret', and
the first client to sent the correct controller secret is the
controller. This is safe assuming the secret is unknowable enough (the
current solution wouldn't pass strict cryptography tests, but it's
likely good enough).
Reverts
|
||
---|---|---|
.. | ||
JSInterface_Network.cpp | ||
JSInterface_Network.h |