We have been informed that there is a hacker somewhere "cheating" on an application we had developed.
basically, the front end is Flash based, and calls my ASP.NET codebehind by passing encrypted parameters, and I just insert that into the SQL Database, or get from the SQL database to the SWF/flash application.
What has happened is that they have been somehow accessing the codebehind (ASPX) code and passing parameters or using the same parameters to "increase" their score (its a game). This of course, breaches the rules etc...
they seem to be doing it every minute or several times a minute. Not sure how they have managed to do this. maybe with some packet sniffer to see what has been sent by the flash client on the HTML page, and then using that in a custom script that posts to the server API's (ASP.NET codebehind/backend)
we obviously cannot ban the IP, as they could change their IP or it m ...
Go to the complete details ...