1. The forums will be archived and moved to a read only mode in about 2 weeks (mid march).

[RFC] PocketMine Management Panel

Discussion in 'General discussion' started by HittmanA, Dec 5, 2017.

  1. HittmanA

    HittmanA Zombie

    Messages:
    207
    GitHub:
    hittmana
    After downloading and testing PMSM I see how it's similar but different. My service is not an app so it can be used on any device that has a browser. My service will be able to accept plugins (thanks @Thunder33345 ) and it will also have all the features of PMSM. Besides why not have 2 different services for people to choose from?
     
    EdwardHamHam and jasonwynn10 like this.
  2. Thunder33345

    Thunder33345 Moderator Staff Member

    Messages:
    2,137
    GitHub:
    Thunder33345
    ahh so it uses ftp to remote control the server
    you will lack a method to control server's lifecycle(start stop reboot)
    you wont have access to console, which can be a problem if it's a panel
    regarding plugins, it's not a good idea to allow people to run code on a centralized server
     
  3. HittmanA

    HittmanA Zombie

    Messages:
    207
    GitHub:
    hittmana
    It can control the server's lifecycle, as I can use ssh. As said before, it can use ssh so it is able to have a console. Plugins would only be able to be installed for your panel, and only authorized plugins would be allowed.
     
    jasonwynn10 likes this.
  4. Thunder33345

    Thunder33345 Moderator Staff Member

    Messages:
    2,137
    GitHub:
    Thunder33345
    still cool for a compromize
    tho i hope you can selfhost it to run whatever plugins your heart contempts
    tho i still think plugins are a bit earlier to be considered
     
    HittmanA likes this.
  5. HittmanA

    HittmanA Zombie

    Messages:
    207
    GitHub:
    hittmana
    So the biggest current problem will be storing the users ftp password in plaintext so that it can be used.
     
  6. Thunder33345

    Thunder33345 Moderator Staff Member

    Messages:
    2,137
    GitHub:
    Thunder33345
    idea is to encrypt them with user's passphrase(not to be confused with password)
    so each operation that needs the user's password will just ask for the passphrase
     
    HimbeersaftLP likes this.
  7. HittmanA

    HittmanA Zombie

    Messages:
    207
    GitHub:
    hittmana
    The problem is the ftp password can't be hashed. It has to be plaintext for the server to accept it.
     
  8. Thunder33345

    Thunder33345 Moderator Staff Member

    Messages:
    2,137
    GitHub:
    Thunder33345
    ENCRYPT not hash,
    please get your terms right, these are very different things that shouldnt be confused with eachother
     
  9. HittmanA

    HittmanA Zombie

    Messages:
    207
    GitHub:
    hittmana
    :facepalm: I can't believe I missed that. I now see what your saying to do.
     
  10. Thunder33345

    Thunder33345 Moderator Staff Member

    Messages:
    2,137
    GitHub:
    Thunder33345
    one con/pro is you need the enduser to do that everytime you want to do something,(i think that's how keybase did it at least)
    and you cant do it when enduser is away(say like auto updates)
     
  11. HittmanA

    HittmanA Zombie

    Messages:
    207
    GitHub:
    hittmana
    What if you did a Hotel California style system. Passwords go in but never come out. Basically have a completely seperate database and service that gets the passwords and when you want to do an ftp operation you send the user's information (their username and hashed/salted password) to the service which makes a new ftp session and then sends that back to the panel service.
     
  12. HittmanA

    HittmanA Zombie

    Messages:
    207
    GitHub:
    hittmana
  13. HittmanA

    HittmanA Zombie

    Messages:
    207
    GitHub:
    hittmana
    ~Update~
    I got a very basic user login/register and add server system set up.
    TODO:
    Move ftp password over to the "Hotel California"
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.