23 replies to this topic

[1vannn]

Alright, my buddies from school and I have created a private ComputerCraft server on his computer and he is hosting a website from it. Instead of having a password server in game, I want to use MySQL. I know this could be very, very dangerous, but we've been able to block any other IP's coming into the web server to ensure the safety of the passwords. I want to be able to make a PHP script that handles the ComputerCraft input, and relays it to the MySQL server, and it get's feedback, and sends the feedback back to the computer ingame. Could someone help? How could this be accomplished?

Edited by 1vannn, 15 May 2013 - 10:16 PM.

[remiX]

I can help. Fairly easy.

Give me a few more details as to how CC will send / receive the info.

Going to sleep now so will reply later

[1vannn]

1. Write("Username: ")
2. Send to server
3. CC expects a reply

[JackCarterSmith]

Here I have the solution for you: my OS! Viewing the source code of the API Nexos, doLogin() function

Good Luck!

EDIT: If you have any questions do not hesitate

[remiX]

1vannn, on 15 May 2013 - 11:13 PM, said:

1. Write("Username: ")
2. Send to server
3. CC expects a reply

Just send the username?
What must be returned back?

Nexus, on 15 May 2013 - 11:53 PM, said:

Here I have the solution for you: my OS! Viewing the source code of the API Nexos, doLogin() function

Good Luck!

EDIT: If you have any questions do not hesitate

He's wanting the php code too.

[LNETeam]

First and foremost, are you proposing using some type of hashing, when sending traffic to and from the server. This would mainly we done with passwords, which I'm not sure (by what you specified) you are going to incorporate. I can write your PHP code, send it to you and fill in the rest of mandatory variables. Just let me know

[1vannn]

remiX, on 16 May 2013 - 08:14 AM, said:

1vannn, on 15 May 2013 - 11:13 PM, said:

1. Write("Username: ")
2. Send to server
3. CC expects a reply

Just send the username?
What must be returned back?

Nexus, on 15 May 2013 - 11:53 PM, said:

Here I have the solution for you: my OS! Viewing the source code of the API Nexos, doLogin() function

Good Luck!

EDIT: If you have any questions do not hesitate

He's wanting the php code too.

If the user does not exist in the database, it'll immediately return an error.

[1vannn]

LNETeam, on 16 May 2013 - 11:54 AM, said:

First and foremost, are you proposing using some type of hashing, when sending traffic to and from the server. This would mainly we done with passwords, which I'm not sure (by what you specified) you are going to incorporate. I can write your PHP code, send it to you and fill in the rest of mandatory variables. Just let me know

I'm looking for more of a small tutorial, so then I can work on the rest on my own.

[remiX]

1vannn, on 16 May 2013 - 03:20 PM, said:

remiX, on 16 May 2013 - 08:14 AM, said:

--snip

If the user does not exist in the database, it'll immediately return an error.

LUA:

Spoiler

-- Variables
local server, username = "serveraddress.com"

term.clear()
term.setCursorPos(1,1)

write( "Username: ")
username = read()

local response = http.post(server, "user=" .. username)
local content = response.readAll()
response.close()

-- If you're using a free website host, such as 000webhosts, there might be extra text at the end of each file.
-- This can be removed using gsub

print(content)

PHP:

Spoiler

<?php
	$sql = array();
	$sql['host'] = '';
	$sql['username'] = '';
	$sql['password'] = '';
	$sql['database'] = '';
	$sql['table'] = '';
	
	if (isset($_POST['user'])) {
		$user = $_POST['user']; // Put the user's variable into a php variable
		$con = mysql_connect($sql['host'],$sql['username'],$sql['password']); // Establish the MYSQL connection
		mysql_select_db($sql['database'], $con); // Select the database
		
		// Create a query to see if the user is valid
		// the * is so that it selects all column variables
		$query = "select * from ".$sql['table']." where username='$user'";
		$result = mysql_query($query, $con);
		if (!$result || mysql_num_rows($result) == 0) {
			echo 'Username does not exist.';
			return;
		}
		
		$row = mysql_fetch_assoc($result);
		
		// $row now has all the stuff from the database row corresponding with the username entered
		// like if the database has a column 'age'
		
		echo $row['age']; // echo the age of the user
	} else {
		// Accessed on a browser
		echo '<h3>Invalid Access!</h3>';
	}
?>

Untested.. tell me if there are any errors

[1vannn]

Yup, the script works.
Howdo I remove the code at the bottom?

Edit: Solved. http://members.000we...m/analytics.php

Edited by 1vannn, 16 May 2013 - 06:07 PM.

[1vannn]

Can you help with a registration system please? I'm honestly clueless about this.

[remiX]

Never knew you could do that on webhost haha

Registration uses the insert query.
Note: You will need to add some anti-spam method to prevent spam of multiple users being created

LUA:

Spoiler

-- Variables
local server, username, password = "serveraddress.com"

term.clear()
term.setCursorPos(1,1)

write( "Username: ")
username = read()
write( "Password: ")
password = read()

local response = http.post(server, "user=" .. username, "&pass="password)
local content = response.readAll()
response.close()

print(content)

PHP:

Spoiler

<?php
	$sql = array();
	$sql['host'] = '';
	$sql['username'] = '';
	$sql['password'] = '';
	$sql['database'] = '';
	$sql['table'] = '';
	
	if (isset($_POST['user']) & isset($_POST['pass'])) {
		$user = $_POST['user']; // Put the user's variable into a php variable
		$pass = $_POST['pass'];
						$con = mysql_connect($sql['host'],$sql['username'],$sql['password']); // Establish the MYSQL connection
		mysql_select_db($sql['database'], $con); // Select the database
		
		// Create a query to see if the user is already in use
			// the * is so that it selects all column variables
		$query = "select * from ".$sql['table']." where username='$user'";
		$result = mysql_query($query, $con);
		if (!$result || mysql_num_rows($result) == 0) {
			echo 'User already exists.';
			return;
		}
		
		// User does not exist, lets add them
		$query = "insert into ".$sql['table']."(id,username,password) values('','$user','$pass')";
		$result = mysql_query($query, $con);
		echo !$result ? "An error has occured" : "Registered!"; // Ternary operator :P/>
	} else {
		// Accessed on a browser or wrong CC information
		echo '<h3>Invalid Access!</h3>';
	}
?>

Shout if there are any errors

[1vannn]

It will not work due to the script not sending the PHP variable correctly. Not sure how to fix it, I've been fiddling around for an hour or so.

[1vannn]

I've tracked it down to your if statement, now, the problem is that your thingy does not like my MySQL. How might I fix this issue?

[remiX]

Thingy does not like MySQL? What do you mean? What is it doing?

[1vannn]

It's skipping everything and just saying the user exists.

[remiX]

What? it doesn't re-add the user if the user already exists.

[1vannn]

I checked the database, there is nothing in the database, and its still saying the user exists.

[remiX]

Oh woops, change

if (!$result || mysql_num_rows($result) == 0) {

to

if ($result and mysql_num_rows($result) > 0) {

[1vannn]

It's 1:30AM for me, I'll try it in the morning.