dbc201 / rocket_dodge_server

A game website created by dbc201 and atillaturkmen

Rocket Dodge

• To run without https do node rocket_dodge_main.js -n or --no_https
• To run without redis do node rocket_dodge_main.js -r or --no_redis

You will still need a database and .env variables for the website to function properly. Database schema and .env variables can be found in the root directory, .env.local must be created, .env is just there to serve as a template.

Demo Website

rocketdodgegame.com

Created by

• Deniz Cakiroglu
• Atilla Turkmen

rocket_dodge_server's Issues

Better documentation

Better and more extensive documentation, mentioning gcp and forever as save-dev. Also talk about potential exploits given that game runs on the frontend.

Back button for games

Some way to go to home screen other than having to use the back buttons

Clean up code

Games have a lot of common functionality. Store these in a single js file.

Touch dodge home button not working

Touch dodge home button doesn't work on mobile

sqlite3 is broken

sqlite3 gives compilation errors on linux. try using better-sqlite3 instead

Possible exploit and fix?

It's pretty obvious that since game runs in frontend, user can choose to modify and post their score in the way they desire. They could choose to post some score that does not reflect their actual game performance.

In an ideal online game, the game would run at the server and user would send input to the server. However, given the limitations of gcp free tier and the effort required to rebuild the project from ground up with a new framework, a replay function could prove to be useful. The state of the game will be recorded every frame and every user's highest scoring game will be visible on their profile available to replay. Now a sophisticated attacker could create fake game states from ground up, but given the scope of this project that is negligible. Also as previously stated, since the power of the server is limited, moving the game to the backend could cause further issues and put strain on the server.