[bf1942] bf2web.gamespy.com

[Joe]

Ah yeah and I had a typo in my spoofed agent in testing..Figuring things out
right now. What a PITA for stats sigs. :(

-----Original Message-----
From: Jorrit Schippers [mailto:jorrit at gameparty.net]
Sent: Thursday, November 10, 2005 2:47 AM
To: bf1942 at icculus.org
Subject: RE: [bf1942] bf2web.gamespy.com


Have you tried the complete URL I posted? You cannot change the query
string, because the getplayerinfo.aspx script accepts just a few
querystrings now, namely the ones that BF2 uses too. You can't change
the querystrings to just the fields you need anymore.

Jorrit

> -----Oorspronkelijk bericht-----
> Van: Joe [mailto:sechon at blackmud.com]
> Verzonden: donderdag 10 november 2005 9:36
> Aan: bf1942 at icculus.org
> Onderwerp: RE: [bf1942] bf2web.gamespy.com
>
> Ok, but I can't access it from many remote sites that
> wouldn't be banned for any reason at all..
>
> Agent is being reported as "GameSpyHTTP/1.0", and I've double
> checked that from my php code AND the agents reported by
> clients requesting my clan's server logo.
>
> For example, I was trying this link:
> http://bf2web.gamespy.com/ASP/getplayerinfo.aspx?pid=43401461&
info=heal
>
> I guess I'll start sniffing..This just seems too odd though thus far.
>
> -----Original Message-----
> From: Jorrit Schippers [mailto:jorrit at gameparty.net]
> Sent: Wednesday, November 09, 2005 3:59 PM
> To: bf1942 at icculus.org
> Subject: RE: [bf1942] bf2web.gamespy.com
>
>
> As far as I can see they have filtered the querystrings and
> allow only those query strings which are exactly requested by
> Battlefield. So just a couple of the many possible
> querystrings now work. For instance the following still
> works, because BF2.exe uses it:
> http://bf2web.gamespy.com/ASP/getplayerinfo.aspx?pid=PLAYERID&
info=per*,
> cmb*,twsc,cpcp,cacp,dfcp,kila,heal,rviv,rsup,rpar,tgte,dkas,ds
> ab,cdsc,ra
> nk,cmsc,kick,kill,deth,suic,ospm,klpm,klpr,dtpr,bksk,wdsk,bbrs
> ,tcdr,ban,
> dtpm,lbtl,osaa,vrk,tsql,tsqm,tlwf,mvks,vmks,mvn*,vmr*,fkit,fma
> p,fveh,fwe
> a,wtm-,wkl-,wdt-,wac-,wkd-,vtm-,vkl-,vdt-,vkd-,vkr-,atm-,awn-,
> alo-,abr-,
> ktm-,kkl-,kdt-,kkd-
>
> The following used to work, but doesn't anymore, because
> BF2.exe doesn't use it anywhere:
> http://bf2web.gamespy.com/ASP/getplayerinfo.aspx?pid=PLAYERID
>
> The golden rule stays: use ethereal to read the
> communications and immitate those communications exactly.
>
> And: mind the User-Agent, should be GamespyHTTP/1.0 or
> something like that. And some ips, like one of mine, are banned.
>
> Jorrit Schippers
>
>