Stats Server and Client API with support for SQL, and NoSQL databases

[lukrop 10]

Hi,

make: g++: Command not found
make: *** [Release/obj.target/fibers/src/fibers.o] Error 127
make: Leaving directory `/home/m1ndfuck/node_modules/sock-rpc-stats/node_modules/wait.for/node_modules/fibers/build'

You are missing the GNU compiler collection. Depending on your distribution install it. In case it's a Debian derivate:

apt-get install build-essential

[emrak 12]

This is, by far, one of the best developments to date and certainly the best solution regarding DB connectivity. Well done micovery! Are you still supporting this endeavor?

[KeganH 17]

@micovery Are you planning to implement any checks for securely handling the data?

You use:

  _result_container = call compile(_raw_rpc call sock_get_response);

in lib\sock.sqf which could allow someone to inject code into the value slot that would execute through this line.

Think of it like MySQL injection only with your api and inside an arma server. Someone could either use a remote execution exploit and run the injection themselves or use a vulnerability in anything attached to the api to get code into the server.

It's not necessarily your job to solve the issue, but some simple checks to verify the read data is in the correct format (string is a string, number is a number, ect.) would be a nice touch.

[torndeco 128]

Micovery last i checked hasnt been active in awhile. 
Code is on bitbucket, will need changes for 64bit due to how it generates unique key for fetching data.

Also extensions really don't need to parse input data checking for injections anymore, you return everything in an array and use parseSimpleArray instead of call compile. Faster and no security issues