A Way of Cheating?

[randyc427]

Anyoneone aware of a way of cheating by switching league files, which enables someone to change passwords and to gain access to the league setup. It has been brought to attention this maybe happening in one of my leagues. I wanted to know, if anyone had heard of this and if there is a way to prevent it from happening?

Thanks
Randy

[randyc427]

To make myself more clear on this problem, here is the scenario.

A GM downloads the online league file. Then copies the league.dat file from a solo league, to the online league folder. That in turn takes out all passwords including the commish password enabling the GM to change player ratings contract info and any league setup options. The GM can then export his team and nothing is ever noticed by the commish.

[Cowboys3356]

Originally Posted by randyc427

To make myself more clear on this problem, here is the scenario.

A GM downloads the online league file. Then copies the league.dat file from a solo league, to the online league folder. That in turn takes out all passwords including the commish password enabling the GM to change player ratings contract info and any league setup options. The GM can then export his team and nothing is ever noticed by the commish.

That would not work. What the cheater would have to do is replace the main file that is being hosted on the server. To do this he or she would have to know the password to get direct access to the server or of course they could hack into it. Then they would replace the league file that everyone is downloading with their own "cheater" league file. Of course if someone went through all of that trouble they have WAY too much time on their hands and really need to get a life!

There is no way to "cheat" by just exporting to the regular league file. Worst thing I have seen happen is when owners do not put a password on their team and then people mess with their lineups but that is about it.

[Raderick]

Originally Posted by randyc427

To make myself more clear on this problem, here is the scenario.

A GM downloads the online league file. Then copies the league.dat file from a solo league, to the online league folder. That in turn takes out all passwords including the commish password enabling the GM to change player ratings contract info and any league setup options. The GM can then export his team and nothing is ever noticed by the commish.

I just got done doing a test using a test-WCBL league file, which we will call "League A", which has a commissioner password, which I will use to edit a player and then export through FTP

Another test-WCBL league file, which I will use to upload the export, which we will call "League B"

And a test-HPBL league file, that currently has a commissioner password, but will be removed during the test, which we will call "League C" (read below).

What I did is reset the commissioner password of League C. Then I saved and quit out of OOTP.

Then I moved the league.dat file from League C folder to League A league folder.

Then I opened OOTP and then opened League A league. The League A folder no longer has a commissioner password. I edited one player from one team. I then exported to a FTP folder.

Then I opened League B. I uploaded said export from League A with the edited player, which I received a "Invalid Export" error.

Take it for what it's worth.