The Castle Doctrine Forums

And this is to keep someone from "camping" in a house until the chill wears off to protect it from other players (like for dual account collaboration).

Oh, this is kind of amazing:

GET /gameServer/server.php

This IS actually a valid HTTP request, by itself, because it matches the ancient HTTP 0.9 spec from 1991.  The server responds with no headers and just sends the requested document (or does the requested PHP action).

Apache ships supporting this 1991 compatibility mode.

Sadly, this also prevents Apache from detecting modern HTTP requests that might be cut off mid-URL.

Weird that the protocol was "appended" in this way so that you can't tell which version of the protocol you're using from character 0 of the request.

Though maybe this allows modern HTTP browsers to still talk to old 1991 servers just fine?

Yeah, fixed the multiple leave issue already.

Another player sent me recordings that confirm that their client was sending the full request (but that it got cut off before the server received the whole thing).

I'm already using Content-Length headers (these are POST requests, and I think they're pretty much required, right)?

So... that brings up the question of why PHP is accepting an HTTP request as complete that does not have POST data matching Content-Length!

Yeah, I just tested this, and PHP ignores Content-Length and lets the request through even if the length of the data does not match the length specified in the Content-Length header (like, if the connection is closed before all the data is sent).

Though I suppose that I could check the Content-Length and make sure it matches.  And this fix could happen server-side with no change to the client protocol.

And some client requests are GET requests, but these are protected from truncation because the full URL comes before the HTTP/1.0 marker in the protocol, so the request is totally invalid if the URL is cut off part way through.

Oh wait... on my servers, even totally incomplete HTTP requests (like "GET /" with nothing after it) are being processed.  So incomplete URLs are being sent through to server.php.   This is crazy.  Need to figure out how to block those for sure.

What do you mean "went offline"?

You mean, you walked away from the game for a while?

Or your disconnected from the network?

If you timed out, the message would be "You died due to inactivity" but this can only happen if you go idle for a long time in the middle of the self test.

Please send me whatever recording you have!

Yes, please send me the recordedGame file that shows this.

jasonrohrer@fastmail.fm

You can watch it yourself (to check) by copying it into playbackGame and running the game.

I looked at the code, and the only way "You died" is displayed is if your CLIENT decides that you died before it even sends the moves to the server (and then after the server gets the moves and sends back OK, the client shows "You died."  but it already decided that you died before it even communicated with the server).  In all other cases (server-side death due to a bug or otherwise), there should be some other error message (house check-in failed).

So, it sounds like this is a very mysterious bug.

Please send me the recordedGame file that shows this happening:  jasonrohrer@fastmail.fm

You can also watch the recording yourself, which might give you some idea of why it happened.

If you're on Steam, there is a pinned thread in the Steam forums that will help you find your game folder.

Daniel made two versions of that painting.

Oh... OS X never supported SDL!

It was something that I downloaded and installed (and I guess that's where it installed itself  /System/Libraries/Frameworks...)

Wow!  Really great to see this happening.

Yeah, sadly, there is no way to prevent this.  How do you tell the difference between two friends who are helping each other and one person using two accounts?

This is true of ALL online games, of course.  Friends working together can help each other.

I'm not saying that it's an intended part of this game.

There were plenty of things put in place to thwart straight-up resource transfer between two accounts.  So you can't easily feed yourself $2000 over and over from a second account (or two friends can't easily feed each other $2000 repeatedly).  But those fixes make sense in the game and don't have huge negative effects on the non-exploiting players.

Trying to detect IP addresses that "seem" to be collaborating would be like looking for patterns in static.

The RoosterTeeth guys have a pretty similar experience in their great and entertaining video:

http://www.youtube.com/watch?v=dhz-f3KQw2Q

When I watched that, I realized how LUCKY I was that they had that experience when showing the game.  The triumph in their voices is undeniable.

Yes, paradoxes are still possible.

That green light is always powered in every step of the loop (alternately gets power from top and bottom) so it settles to powered, even though neither top or bottom settle to powered.

Even more striking if you have orange lights on either side of the green that show up as not powered.  Or even better, a trap door that looks like it is powered from "off" electric floors on both sides of it.