@CoderGautamYT

This file cannot be displayed:

Does the image show up?

No.. @MushyAvocado

@CoderGautamYT There were a ton of sedated bots. Idk why the image won't load.

Ok, I made a deal with @sedated, he said he will not bot my game anymore, so we're safe... for now... @MushyAvocado

I played just now bots are not there. @CoderGautamYT

Yay! Looks like sedated is keeping his word. @india3

@CoderGautamYT

tell sedated to delete the repl.

I've done a update to the game. bots should have stopped lets gooo. @hghg81

@CoderGautamYT
:) I will check for you

@CoderGautamYT

it worked!!!

Ok @hghg81

Nice! @hghg81

@CoderGautamYT Thx for solving issue. Nice game btw :), I also hate it when people just try to ruin your creation for no reason. It sucks man. Keep on going man, you're doing great. BTW, I forked this, and making a few changes to it, if you were fine with that.:)

Yeah, completely fine with it. Make sure to remove the commented code if you want to run the game on replit, right now it redirects to heroku. @HartajPartapPar

@CoderGautamYT Sorry, I have literally no clue what that means. Are you trying to tell me to instead of npm start, use a different kind of thing? And this game is LEGIT, I wish you the best of luck on winning the kajam competition. :)

No, nevermind that. Thanks! @HartajPartapPar

@CoderGautamYT Np, I'm very bad at coding for the most part. Goodbye, and good luck :)

Thanks, good luck to you too! :) @HartajPartapPar

@CoderGautamYT How the do bots even work?

Do they like exploit and one/two shot you (someone did that and their name was "test"), or are they programs that follow players?

The bots seems awfully complex and time-consuming for a game that just came out, or is there some sort of easily exploited vulnerability in your system.

Well the bots work by just sending packets the same way a player does. The current one that's going on (called test) is a movement exploit. To prevent slow movement for players with high ping, I made it so that high ping players can move faster to compensate for the less amount of packets they send. The test bot exploits that and sends a really low amount of packets. This makes it acheive fast movement or a kind of teleportation. There are so many different kinds of bots and I have no idea why people are spending so much time making them but I am trying my best to prevent any game-breaking bots from crashing servers (yes that has happened before) @Baconman321

I would say the test bot isn't that OP or makes the game unfair to normal players. Yes it can be annoying but I think it's not too bad. I will take action if he adds AI Pathfinding or Combat to it. (and also yes AI bots have been made that collect coins and follow and kill players) @Baconman321

Uh oh, @sedated is back with a new bot...

@CoderGautamYT Kind of sad but I'm going to say it.

It's amazing how dedicated people are (and talented) at making bots.

Maybe you could make a test arena and allow bots there, just to spark creativity and problem-solving (although, they might as well make their own game for it).

Also make the test arena accessible to normal players, so they can just see how the bots are interacting (and add a spectator mode). This is all an idea, but maybe it would encourage people to try a place where they are allowed to exploit (to divert attention from the main area. Plus, bots can have better skills and accuracy than humans can, so it would be challenging to make your bot superior to others... kind of a bot competition!).

Honestly though, I am sad that people are wasting their time on doing harm.

Although it does seem fun to program bots like that. Like I said, maybe make a bot competition. If you don't, IG i could make something similar, although my game dev skills are non-existential right now...

Its annoying how a lot of people don't care about making good bots they just like to spam connections to crash the server. @Baconman321

@Baconman321 @CoderGautamYT
There is still a botting prob

I know, he's back @XCode101

@CoderGautamYT

that seems fun too. May I commit white hat?

Can you use cloudflare? I think that has DDoS protection, which may help your botting problem.

@Baconman321 I'm not ddosing anything. All I do is create a socket that connects to the URL, and creates an interval that sends attack and movement packets.

@CoderGautamYT You might be able to add an IP ban.

How can I prevent this? @sedated

@CoderGautamYT Also someone is crashing the server by spamming connections. Read into CORS to fix remote connections.

@sedated I advise you not to do it if it is illegal, these kind of things are very dangerous if pursued wrongly, and can end you up in jail at the very worst (or less life-changing but still frustrating - banned from replit).

As long as it's ok, then sure go ahead. Just be careful and always check the rules (exploiting loopholes is also a nono, most ToS will prevent exploitation of loopholes)

K @sedated

I have a basic version implemented, working to improve it. @XCode101

@sedated So you use pathfinding?

How does that work, and how do you tell where the players are on the map?

Do you program all of this by yourself, because that is a lot for just a couple of days IMO.

@CoderGautamYT "ReddCrasher" is a skid off "TamperWare". Same thing, you haven't patched it. All it does is cal io(game_url) repeatedly.

@Baconman321

1. I don't use pathfinding. There are no obstacles on the map, which makes it very, very simple.
2. I read it directly from the players object sent from the server.
   
3. Yes, I coded it in around 1 day in school because I was bored. (like 1-2 hours)

Amazing!!! Your sooo good at coding [email protected]

@CoderGautamYT I'd like to see you patch cheating through the client by using tampermonkey. But if you do, congrats because your game is now much more secure so you don't have to worry about large-scale hacks if your game grows.

@sedated So the game returns the player positions?

Well, I mean kind of obvious.

I assume if you know enough it isn't that hard (i've never tried. But you'd have to know your location as well as the other players, choose a target then calculate how to get to them as well as compensate for updates)...

Sounds simple in concept but hard to put into practice if you don't know what you are doing (like me).

@Baconman321 The game sends each player's positions, which I store in an object.

I then run "chooseTarget()" until a valid target is found.

I then set an interval (1ms) that first checks if the target is valid (prevent following dead/left server players) then follows them based on the difference between my and their position.
I also set a seperate interval that just spams attack.

@CoderGautamYT Hey, Iv actually been working with @sedated on the bots. We actually decided to create a debug/test server @ https://0276c611-5213-4643-b37e-462194808c4b.id.repl.co/ in hopes to minimize the impact on your game. Just saying were doing this for fun, not to be malicious. I also would like to state that @sedated still insists on testing it on the real game with players once and a while.

Alright, it's fine, just please don't spam the server with people until it crashes. It's fine if you do only 1 or 2 of them. @124423

@CoderGautamYT The way the bot works there is only one player at least in the current version.

@sedated Would be nice if you could make a more complicated algo. I could help, but I don't know much about NodeJS and I'm somewhat busy...

@CoderGautamYT I would also suggest implementing a CORS policy.

Alright, try running your bot thingy, does it bypass? @124423

Yay, there are no bots when I tried to play. Seems like your anticheat v1 patch worked! @CoderGautamYT

@CoderGautamYT were working on a bypass right now

good luck idots @124423

@CoderGautamYT I couldn't get the photo, but a bunch of Freekill :) named players came into the server. Not complaining tho, didn't break the server, just gave free coins.

How many came? @FrancisPan

@CoderGautamYT 7 of them came and whenever I killed them they rejoined.

Huh @FrancisPan

Please don't help him.. @Baconman321

@CoderGautamYT If you don't want a bot then ok (I've never really made bots anyways).

It would be fun to have an arena to test bots out with, but your game so your choice.

@sedated As long as you send/receive data from the client your game will always be vulnerable to something.

The best thing you can do @CoderGautamYT is have the game to be an i/o board and only send keystrokes and then have the server process them into instructions, then form an image on the server then send it to canvas (so that the players can't intercept the other player's positions. However, lag will be a big issue because you have to send images over a socket every game tick). A problem with the image though is that the resolution would have to match the screen. You could do this by sending the canvas size to the server and have the server render the image based off of those specs (so the specs would be different for each client). But, people could potentially exploit this by sending absurdly large dimensions so your client would have to work overtime to produce the image thus lagging the game. You could put measures on this by refusing clients sending absurdly large dimensions (dimensions that not even gamers with a 50 inch OLED - yes alienware makes a 50 inch OLED - monitor would have), and/or after a certain point just stop scaling up the resolution and force the client to deal with a lower resolution (will be an annoyance to people because everyone knows lower resolutions are so eye-straining and awful).

Diep.io has an interesting way of warding off bots, by requiring a computation-intensive calculation called POW (proof of work... no diep.io is not mining bitcoin). One client alone works fine; it doesn't lag. But if you run multiple clients it becomes extremely slow and strains your CPU. Also, if you refuse to respond with a POW within 10 seconds you get kicked. Since the bots are hosted on repl and repl naturally has pretty slow computing power you will likely ward off most bots hosted on low computing power platforms.

The source is from reddit, so I cannot verify the truthfulness of the claim, but see for yourself: https://www.reddit.com/r/Diepio/comments/kgyv51/diepio_might_use_your_computer_to_mine/

Huh @Baconman321

I agree, once the game is good enough, I'll make a no anticheat test arena. Just dont help them make a hack for the normal servers. @Baconman321

@CoderGautamYT Recaptcha is very hard to be beaten by bots.

Oh wait, nvm a bot already beat it: https://www.youtube.com/watch?v=fsF7enQY8uI XD

Although, like they said they could make multiple tabs and then use an extension like tampermonkey to control the bots once recaptcha has been bypassed by the human (the number of bots is limited to their computer's power as well as how many recaptchas they can work through by hand). Because of this, I recommend you look into the POW concept I gave you.

It's fine lol, bots problem have stopped, im gonna add more features and mechanics to the game so its more fun. Bots and anticheat are the next [email protected]

haha

@CoderGautamYT ITS BACK

uh oh- @mollthecoder

was he cheating or botting? @mollthecoder

@CoderGautamYT I am a human GEtting kicked out of the game why?

@CoderGautamYT cpfc

Slow wifi probably, try refreshing the page. Sometimes it just "does" that. I'm trying to improve it. @HrushalNikhare

What is it saying? @HrushalNikhare

@CoderGautamYT They just stood there, but occasionally they'd move for a few seconds towards a player while spam attacking. I'm worried that soon they'll start acting like the normal bots again. @sedated is making extrememly complex things and i'm not surprised that he already bypassed the restrictions.

Hmmm, he said he stopped making bots, I have to dig deeper into this, will update you if I find something. @mollthecoder

@CoderGautamYT that i'm a bot or some thing

You probably have a low captcha score. Try logging into google and trying again. (this can improve your captcha score because I'm using Google's recaptcha) @HrushalNikhare

@CoderGautamYT ok

@CoderGautamYT I want to clarify that "SERVER RESTART" wasn't actually restarting servers, it was just the bot's name, probably to scare players. It acted like a normal bot.

@CoderGautamYT It seems like such a big botting problem for such a small game.

Maybe I could help with anticheat?

@CoderGautamYT

What the-

Guy gained that in around 2 seconds - top.

Probably killed a big player, players drop their coins when they die. @ABirdCoder

I got things covered for now, I'll let you know if I need any help, thanks! @ABirdCoder

@CoderGautamYT im not sure?

@figgledigg lol

@CoderGautamYT yuh probably

True... @CoderGautamYT

@ABirdCoder Hi.

lol hi @mollthecoder

@CoderGautamYT not true

How can you make a "bot" for this game?

By sending packets to the server exactly how a normal player would. @RixTheTyrunt

bot bypass captcha sad @CoderGautamYT

@CoderGautamYT sorry for bothering you again but i have a quick question. is the smaller-player-inside-bigger-player thing patched? I couldn't tell that well when i played. Sorry for bothering you again.

It's not a bug, It's actually an intentional thing so that small players actually have a chance at killing bigger players. I am working on a hit cooldown so that bigger people can't just spam their mouse. Once that is added, i will make it so that you cant go inside people anymore. @treem-heem

Wow man, I feel really bad for ya. @CoderGautamYT

Nice improvements to the game! Now it's super polished and nice!

It's fine, I've gotten used to the bots and hackers lol. And thanks! @LeviathanCoding

@CoderGautamYT yo bro what happend to size i got 15k and im not the right size what happend

@CoderGautamYT ?

Ok @CoderGautamYT

second reply pog @CoderGautamYT

Yes I know I will fix it later (it's harder than you think) @Tamilcoder

i agree it is kinda odd @justaperson22

i am new to coding @justaperson22

me too. i am learning C language @PeweAtBomoAds

Updooted @BabovaJones

Thanks @BabovaJones

Yes @BabovaJones

at least it got honorablementions @BabovaJones

Next: 10k Plays @CoderGautamYT

haha yes @KocasVlak

already 20k lol @KocasVlak

40k now @dof

Thanks! @cesof

thanks lol @JusticeFriedt

no THE BEST GAME EVER @JusticeFriedt

@JusticeFriedt
agreed

Thanks @theamazingplant

1262 now with 31 kills

Ayy nice job dude @ruiwenge2

Wow i have only reached 100 max @ruiwenge2

@india3 Try playing when no one else is online (although that is hard to do...)

Lol @cdCreepArghhh

@ruiwenge2 pro gamer move
IM BACK TO REPLIT LES GOOOO

Nice @PixiGem

@mollthecoder I'm saving up for the CoderGautamYT skin

uh oh lol @mollthecoder

Nice @mollthecoder

thx, lobbies are empty because its night time, normally there are a few people playing @ruiwenge2

@CoderGautamYT also timezones

yup, it's a little skin test. @ruiwenge2

no way @ruiwenge2

Thank you for the kind comment! @TakiyapNeel

To send files to the client. @MushyAvocado

@CoderGautamYT OK, thanks. Do you need the hacker plan to keep your server active constantly?

yeah, just bought it. @MushyAvocado

@CoderGautamYT Nice. Can you help with my code? I'm trying to get the server to work, but I'm not sure how to use app.use. I have the package.json file and npm set up correctly.

https://replit.com/@MushyAvocado/online-game2#index.js

Alright, can you invite me to it? @MushyAvocado

@CoderGautamYT OK, I invited you. You can message me, but if I'm not online just comment out my wrong code and put in new code with an explanation. That would be very helpful :)

Ok @MushyAvocado

@CoderGautamYT Thanks for fixing it! I could've sworn I tried that, but I guess not lol.

Your welcome @MushyAvocado

@CoderGautamYT noice xd

xd @MushyAvocado

What this mean ? @GautamSudarshan

basically "cool" @india3

thanks! @LekshmiShiju

I added ads to cover the domain costs (io domains are pretty expensive). I also spend a lot of time developing this game, and it would suck if I get nothing in return. The ads shouldn't be too annoying since they only appear once a minute and they are always skippable. If you don't like the ads, you can always use an adblocker. I am 100% fine with that! @rbaqai

@CoderGautamYT
oh ok i understand sry

@CoderGautamYT btw sry about the bot problem people can be so mean to just a fun little stuff sometimes

yeah.. @rbaqai

it ok @rbaqai

i hate ads too, but its the only source of income for us web game devs. @rbaqai

Press enter @zdj006

yeah, there already is a limit of 7 cps, i should probably lower it. @Baconman321

@CoderGautamYT Someone named Blah prob used an autoclicker (or, like me, just clicks REALLY fast).

The problem is that, when you get bigger it is harder to attack them. Maybe make the small ones significantly faster (or the big ones significantly slower), because they are only vulnerale if you get close, and if they spam clicks you can't do that.

LOL I somehow got stuck in one of the players prob using an autoclicker. He was 3k and I turned on my autoclicker. He left before he died... typical XD

Lol @Baconman321

@Baconman321
if you use a chromebook it is really good to tap on the screen it turns you around right away i got a score of 9000 as ranger and 123 kills! nothing compared to auto clicker though.

autoclicker is bannable @zarooma

@CoderGautamYT
that would be lot more fair

@zarooma I have a non-touchscreen chromebook.

@CoderGautamYT But how do you ban?

@Baconman321
maybe there is some other click ways to be discovered then

I have a ban system in place, it's just that i barely havetime to moderate @Baconman321

@CoderGautamYT But what do you ban by?

IPs?

I believe collecting IPs are not allowed by replit, although it may be in very specific scenarios.

IPs are also a bad idea because it can easily be faked, and even used against people when their IPs are known (framing).

Never knew that ip wasn't allowed... I don't store any IPs, just the ones that are banned. I collect Ip's the moment when a player joins and discard them immediatly when they disconnect or die. It has helped me a lot with dealing with botters.. @Baconman321

@CoderGautamYT But then we have someone that can use TOR. Their IP is scrambled and you will never be able to know their true IP. Botters can scramble their IP, too.

honestly i dont care about this game that much so if that happens i will figure out a way. i dont see what your point is right now. what do you want me to do? @Baconman321

@CoderGautamYT Just saying, IPs aren't a good way of banning if you want to keep the people away.

Try making them sign up with a repl account or something.

That would suck because actually a lot of the playercount isn't from replit and some are actually real people being redirected from .io game portals. @Baconman321

But yeah i guess IPs aren't the best way, but the botting problem is basically over now since the original community kinda died out.. if the game does however make a comeback and there are more botters, i will do whatever is necessary to stop them. For now, I think the IP system is good enough. @Baconman321

@CoderGautamYT Aw man

I really wanna do something and bypass the IP system >:)

@CoderGautamYT io portals?

Is this game that popular?

It's so simple though! You could likely make it much better!!!

yeah lol i added it to some and it gets some players (around 2k per day). yeah i could do a lot more, currently i'm busy with school maybe during holidays @Baconman321

bring it on @Baconman321

would be cool to see if you can bypass @Baconman321

@CoderGautamYT That's likely fairly easy (although I do not know).

@CoderGautamYT Honestly, I don't know much about penetration testing. But, I could always try to find weak spots in your code if ya like. I've done it with someone else and found a critical flaw (xss weakpoint) and told them how to fix it.

Sure, if you could find any, that'd be great! @Baconman321

it probably is easy, but would be a good challenge (for both of us) @Baconman321

also @Baconman321 , i was reading your past messages. if you want to test out botting/cheating the game, im fine with it now. if you do find any exploits that can cause big problems, please dont abuse it and let me know asap. thanks!

@CoderGautamYT k!

totally won't abuse it

TBH, I'm not really in the coding mood right now, waiting to burn out grinding on my new favorite game, so that I can actually focus on coding again (hoping to take up robotics, too).

However, websites will remain in my blood (mainly because I love the security side of it).

Ok, have fun grinding!

try to abuse it (if u can)

@Baconman321

yay! @Hackerboi3000

@mollthecoder

@mollthecoder Hey, man!

Hi! @desucode

Wha @mollthecoder

xDD @CyberHacker101

@CyberHacker101 lol i was just bored

same

i bet you wont even get to touch me xD @ruiwenge2

Awesome game
You should change space bar to attack thru @CoderGautamYT

That's on my todo list, will add after kajam @CyberHacker101

Dope :D @CoderGautamYT

Thanks! :D I'm happy everything is sorted out. @CyberHacker101

You got your 60th updoot ;D @CoderGautamYT

Tysm!!! <3 @CyberHacker101

np @CoderGautamYT

thanks! you helped me a lot lol @Coder100

you were s? lol i saw you @ruiwenge2

@CoderGautamYT yes i was lol

@ruiwenge2 how and when did you be the only one online lol

lol @PixelRunner

Yes but it is with real people so more fun @SomeBoyPlayz

@PeweAtBomoAds yohoho.io has real people

actually it doesnt, (try joining a game and disconecting from wifi) @SomeBoyPlayz

no @SomeBoyPlayz

thx i used node, phaser and socketio @Pewincodes42

@NancyShannon what uh ok?

@Yusuf7392 Oof lol

@rbaqai i think i gave you one