[bf1942] bf2web.gamespy.com

[Jorrit Schippers]

Mine still work:
http://bf2stats.ncode.nl/
The password is "blaat"

(You even get avatars :))

Jorrit 

> -----Oorspronkelijk bericht-----
> Van: Joe [mailto:sechon at blackmud.com] 
> Verzonden: donderdag 10 november 2005 9:55
> Aan: bf1942 at icculus.org
> Onderwerp: RE: [bf1942] bf2web.gamespy.com
> 
> Ah yeah and I had a typo in my spoofed agent in 
> testing..Figuring things out right now. What a PITA for stats sigs. :(
> 
> -----Original Message-----
> From: Jorrit Schippers [mailto:jorrit at gameparty.net]
> Sent: Thursday, November 10, 2005 2:47 AM
> To: bf1942 at icculus.org
> Subject: RE: [bf1942] bf2web.gamespy.com
> 
> 
> Have you tried the complete URL I posted? You cannot change 
> the query string, because the getplayerinfo.aspx script 
> accepts just a few querystrings now, namely the ones that BF2 
> uses too. You can't change the querystrings to just the 
> fields you need anymore.
> 
> Jorrit
> 
> > -----Oorspronkelijk bericht-----
> > Van: Joe [mailto:sechon at blackmud.com]
> > Verzonden: donderdag 10 november 2005 9:36
> > Aan: bf1942 at icculus.org
> > Onderwerp: RE: [bf1942] bf2web.gamespy.com
> >
> > Ok, but I can't access it from many remote sites that wouldn't be 
> > banned for any reason at all..
> >
> > Agent is being reported as "GameSpyHTTP/1.0", and I've 
> double checked 
> > that from my php code AND the agents reported by clients 
> requesting my 
> > clan's server logo.
> >
> > For example, I was trying this link:
> > http://bf2web.gamespy.com/ASP/getplayerinfo.aspx?pid=43401461&
> info=heal
> >
> > I guess I'll start sniffing..This just seems too odd though 
> thus far.
> >
> > -----Original Message-----
> > From: Jorrit Schippers [mailto:jorrit at gameparty.net]
> > Sent: Wednesday, November 09, 2005 3:59 PM
> > To: bf1942 at icculus.org
> > Subject: RE: [bf1942] bf2web.gamespy.com
> >
> >
> > As far as I can see they have filtered the querystrings and 
> allow only 
> > those query strings which are exactly requested by Battlefield. So 
> > just a couple of the many possible querystrings now work. 
> For instance 
> > the following still works, because BF2.exe uses it:
> > http://bf2web.gamespy.com/ASP/getplayerinfo.aspx?pid=PLAYERID&
> info=per*,
> > cmb*,twsc,cpcp,cacp,dfcp,kila,heal,rviv,rsup,rpar,tgte,dkas,ds
> > ab,cdsc,ra
> > nk,cmsc,kick,kill,deth,suic,ospm,klpm,klpr,dtpr,bksk,wdsk,bbrs
> > ,tcdr,ban,
> > dtpm,lbtl,osaa,vrk,tsql,tsqm,tlwf,mvks,vmks,mvn*,vmr*,fkit,fma
> > p,fveh,fwe
> > a,wtm-,wkl-,wdt-,wac-,wkd-,vtm-,vkl-,vdt-,vkd-,vkr-,atm-,awn-,
> > alo-,abr-,
> > ktm-,kkl-,kdt-,kkd-
> >
> > The following used to work, but doesn't anymore, because BF2.exe 
> > doesn't use it anywhere:
> > http://bf2web.gamespy.com/ASP/getplayerinfo.aspx?pid=PLAYERID
> >
> > The golden rule stays: use ethereal to read the communications and 
> > immitate those communications exactly.
> >
> > And: mind the User-Agent, should be GamespyHTTP/1.0 or 
> something like 
> > that. And some ips, like one of mine, are banned.
> >
> > Jorrit Schippers
> >
> >
> 
>