I found out that if I play my cards right, users will not actually be submitting the badge info in AoD.

AoD's world cycles every 15 minutes. Instead of the badges submitting with the user achieves them, they will submit when the world cycles. Since I am sending all of the badge requests directly between my server and kong's server, the users will never see the variables passing. Also, since Kong uses a triple authentication system that allows for temp variable holding, everything will be insanely secure.

When you login...
Kong sends me your info.
I process the info to make sure it's correct.
I send it back to Kong to make sure it matches.
Kong sends back an OK or a No Go.
If I receive a No Go, Auto Ban by Kong ID and IP.
Game now loads and you are now authenticated to my servers.
The GCWorld Servers create a cookie on your system with the following info
GCWorld User ID
GCWorld Authentication Key
GCWorld Session Key
GCWorld Combined Hash

The Cookie and your HTTP Session Data authenticate against my Sessions database. The Sessions database contains:
GCWorld User ID
GCWorld Auth Key
GCWorld Session Key
GCWorld Combined Hash
Kongregate User ID
Timestamp
A few other secret tidbits of info. (broken image removed)

Once you are all authenticated, you are into the game. The world cycles every 15 minutes.
A special crontask that sits outside the public_html folder runs every 15 minutes and cycles things like
Research
Resources
Population
Etc...

When it runs, it will also check for badge completion. It then compares that with a "Badge Completion" database to see if it has already submitted your badge. It is set up to submit each badge three times to make sure it goes through when it is completed.

Now comes the fun part.
Every 15 minutes, when the world cycles, the system generates a random 64 character string of letters and numbers.
It submits the value to Kongregate servers.
Kongregate sends a call back saying that it received it and that it's ok.
GCWorld sends each badge entry along with that key. As each one sends, Kong sends an OK back to let GCWorld know that is has properly submitted and to send the next.
Finally, after the script is done, the random key is deleted and is gone.

Unless you can SQL inject, I don't think there is a way around it...

Personally, I don't care if they ban my account. The game, if things work out, will generate Kongregate money, and I don't think anyone would turn away money.

I'm only interested in the user base. If I get any kind of funding from Kongregate, which I doubt, it will all towards getting a better hosting plan. I can easily build a massive server to run the game, but I have no backbone to connect it to, so I would be limited to 2-3 users on my current connection. (broken image removed)

Wait, I'm confused, maybe I missed something. But why are you posting details on AoD in this thread?

Yup, I'm posting details everywhere.

Only those that are dedicated to the hack will be able to take that information and use it for other such games. For instance, when the next wave of Konduit games arrive, we will already have a good grasp on how the new system that interacts between the game and kongregate works.

See where I am going with this?

Dream World is Konduit based. Elements is flash, but it's Konduit based. The flash program interacts with the Elements servers, not with Kongregate at all. The flash game does submit the badges, however. Several other file on both Kong and Elements servers interact all the time and manage accounts and what not.

Just looking through the code in firebug and came across the word filter. Thought you guys might find it amusing. There are some interesting entries in it. Spoiler tags to protect those sensitive to bad words.
badparts=new Array( "fuck","bitch","biatch","pussy","clit","cunt","asshole", "asshoe","asswhore","asswhole","shitface", "dumbshit","shitmy","myshit","eatme", "eatmy","eatcum","drinkcum","cumalot", "cumwhore","mywhore","eatshit","suck", "dick","penis","dike","dyke","www",".com",".c-o-m",". c o m",".net",".n-e-t",". n e t","http","jizz","masturbate","cock","asswipe","arsehole","banger","nigger","nigga", "dildo","nutsack","twat","redirectfb","equipmentbox","loadxfbml","playmage", "dreamworld");var badwords=new Array("william ren","williamren","sex","freesex","hotsex","wank","wanker","admin", "administrator","shit","cum", "fag","hoe","tit","whore","ass"

edit: spoiler block cut off long lines - spaces added to fix

Quote from: "evildeliverance"

Just looking through the code in firebug and came across the word filter. Thought you guys might find it amusing. There are some interesting entries in it. Spoiler tags to protect those sensitive to bad words.
badparts=new Array( "fuck","bitch","biatch","pussy","clit","cunt","asshole", "asshoe","asswhore","asswhole","shitface", "dumbshit","shitmy","myshit","eatme", "eatmy","eatcum","drinkcum","cumalot", "cumwhore","mywhore","eatshit","suck", "dick","penis","dike","dyke","www",".com",".c-o-m",". c o m",".net",".n-e-t",". n e t","http","jizz","masturbate","cock","asswipe","arsehole","banger","nigger","nigga", "dildo","nutsack","twat","redirectfb","equipmentbox","loadxfbml","playmage", "dreamworld");var badwords=new Array("william ren","williamren","sex","freesex","hotsex","wank","wanker","admin", "administrator","shit","cum", "fag","hoe","tit","whore","ass"

edit: spoiler block cut off long lines - spaces added to fix

WANKER LMFAO!!
And who the hell is William Ren?

Game's creator, obv.

Just looking through the code in firebug and came across the word filter. Thought you guys might find it amusing. There are some interesting entries in it. Spoiler tags to protect those sensitive to bad words.
badparts=new Array( "fuck","bitch","biatch","pussy","clit","cunt","asshole", "asshoe","asswhore","asswhole","shitface", "dumbshit","shitmy","myshit","eatme", "eatmy","eatcum","drinkcum","cumalot", "cumwhore","mywhore","eatshit","suck", "dick","penis","dike","dyke","www",".com",".c-o-m",". c o m",".net",".n-e-t",". n e t","http","jizz","masturbate","cock","asswipe","arsehole","banger","nigger","nigga", "dildo","nutsack","twat","redirectfb","equipmentbox","loadxfbml","playmage", "dreamworld");var badwords=new Array("william ren","williamren","sex","freesex","hotsex","wank","wanker","admin", "administrator","shit","cum", "fag","hoe","tit","whore","ass"

edit: spoiler block cut off long lines - spaces added to fix

So much win :lol:

This post was imported from an account that no longer exists!
Previous Name: phreneticus