开发者

Preventing data tampering on client/server application

A bit of background info:

  • I am building a geolocation based game for Android
  • The server-side is coded开发者_运维问答 in php
  • Certain in-game actions requires the client application to send the current latitude and longitude to the server

Is there any way to prevent the user from tampering with the location data being sent to the server?

Please let me know if you need more information

Thank you,

EDIT: I understand there will be workaround to any security measure I implement, but how can I make it harder for users to modify the data being communicated to the server


The short answer is no. They will always be able to fiddle their device or application to send you what they want, because they control it.


Well, to some extent. You could consider using public key cryptography to make sure the message sent from your app has not been modified in between. That will prevent people from using a simple proxy to capture the data you're sending. The easiest way to do this is by using SSL.

What JVerstry means is that you would always be able to modify the app or control whatever the device is telling your app about the location. And no, there is no way of getting around that.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜