I have a forum that deals with trading, and I was wondering how would I go about making a program to upload information about traders to a subdomain on my site.
A program that would use a subdomain on our site to upload information about traders.
MACHINEID - IP - (check username of forum) - (check password of forum) .
and anything else you guys think will be useful to verify users during/before a scam.
Originally Posted by Renfeild
I mean, anything else you can think of adding to the program would be good. People have been scammed on my site before so I want to make sure that it doesn't happen again. Sorry if it wasn't clear.
Unless you're planning to use some browser fault to inject and run code on the client platform this is certainly not a C++ problem.. And if you did want to do that, it'd hardly be ethical to show you how to do it.
What you want is basic information that a server side language, such as PHP, will expose to you.
NB: Nobody would be willing (or at least shouldn't be) to download software that will upload details about them to a server.
But this way I could prevent scammers from screwing people on my site.
All it would have to do is have a simple login GUI and I'm not sure how to make the script for that because I would like it to be the same login credentials as my forum but I'm not sure about the code for that and all it would have to do for info is upload the Machine id, IP, Time. So that way if someone reports a scam. The appropriate action could be taken.
I was thinking about making it a cgi application but I think I would rather just have a program that runs, uploads everything needed for authentication, and then terminates. It could even be deleted after. I'm just curious about how I would check the usernames and passwords with the ones on the forums. That's all.
Surely, the server itself knows the time better than the individuals PC. The IP address is also known [I don't know how you get that, but I know that phpBB, vBulletin and similar "knows" the IP address when you post a message]. The rest (detecting who is scamming, spamming or otherwise misbehaving) is unfortunately quite hard. You can have rules like "don't allow e-mail addresse that come from @xxx.yyy", which does work reasonably well.
Requiring a valid e-mail address will not really stop anyone, but at least it requires a little bit of effort from the naughty people.
Blocking groups of known "bad" IP addresses can also be done, if you want to.
Both of these blocking methods are of course quite coarse and will ALSO prevent some legitimate users - unfortunately, there's no real good way around that.
I'm really starting to think that this would be better done with some serverside language. But if I wanted to somehow Auth users to the site with C++ how would I do that?
Well that becomes a problem also - you will need to integrate with a users browser to set cookies and such. So unless you want to only use your own browser, you'll have to learn to do this for every major browser - which will then alienate users who don't use those (for instance: a screen reader, or mobile browser).