Question

I’m finding lately how unsecure Javascript is when programming a game (I’m trying to do a turn based RPG and currently the battle calculations are done through Javascript which any player can cheat with of course giving themselves as much XP as they want), so I’m wondering if I were to move my battle screen to flash if this would be any more secure, or is there just as easy of a way to cheat this?

Answer 1

Come on. It’s the same question really. Answer remains the same too:

No matter what the game, whether JS Flash or native binary, if the scoring system is vulnerable, people will tamper if the game is good enough. Stick to clever serverside every time.

This is not a problem that can be solved by obfuscation at the client end. There’s plenty of prior art concerning keeping high-score tables/game data secure. Sharpen your google-fu and have a look.

Although the title of this post would suggest it’s not applicable, I’d consider the difference between a browser/non-browser game to be irrelevant in this regard. As such, take a look:

Secure Online Highscore Lists for Non-Web Games