Global Datastore Service! (Closed)

Could you tell us the exact limits per user? E.g. how many requests per player per minute are allowed before you lock the developer out?

Asking mainly because if this site is permanent and stable I might actually use it for my main project (with potential for high volume traffic)

1 Like

Any more QoS info would be greatly appreciated :slight_smile:

Anyone considering using this should be wary. It’s a nice thought, but it’s just not a safe bet for any developer considering relying on something like this for something so integral to a game (user data).

  • It’s free, with no contract. The author has no obligation to keep your data around or continue the service. Even if the author promises to do so, that’s a promise he cannot truly make. For example, if the author were to become unable to maintain the project or unable to pay for hosting for any number of reasons (work, health, financial situation, death) you would be left with no recourse.
  • There is no SLA on uptime or data integrity. Maintainers of free projects have no incentive to guarantee up-time or ensure that your data doesn’t become corrupted. You are trusting the author and his skills completely (and likely blindly).
  • You are adding more potential points of failure to your critical infrastructure. Right now, all Roblox games are reliant on Roblox for keeping their servers working. Roblox is a huge corporation with massive incentive to have as much up-time as possible. A project like this is far more likely to fail, crippling your game until it’s restored (if ever).
  • It’s a black box. A “black box” in terms of a software project is a component in which you input data and receive output, but you do not know what that component does or can do with the data in the mean time. While it may be a relatively simple component (key/value stores), this still applies as changes can be applied to the service at any time without notice.

The author isn’t a bad person for making this, it’s actually a genuinely nice gesture to the community. But experienced developers will already know everything I outlined above, so this really only serves as a trap for naive developers who don’t know any better. Roblox’s built-in DataStore service is more than enough for most games, and if you are serious about a custom data storage solution then you should be looking at the big players with proper contracts and SLAs (Google Firebase Realtime Database is probably your best bet).

15 Likes

I don’t mind lots of requests, if you are purposely trying to break it, or it looks as if you are, I will lock the user.
Same for creating thousands of new entries of useless info. If you make a game thats popular with this and are saving user’s data, such as points or structures, I am okay with it but if you are spamming it with blank data you shall be locked.

Found a bug with the mail server. Sorry about that, if you signed up I have verified you.

I think anyone wanting to use this should consider these points. I do plan on releasing all of the code tonight, so if you are interested seeing how it works you can see.

This was never intended for serious developers, if you are looking for something better than Roblox’s datastores but still want to host it yourself my previous forum post NodeJS Datastore with that you host it yourself and you know what happens with your data and how it gets from point A to point B.

2 Likes

As of now there is no QoS, I do plan on adding a priority system to users.

Neat! This makes my homebrew solution look terrible.

This is really just a fancy skin and a rewrite in PHP from my previous post. It’s nothing special.

Didn’t catch your other post. What would this be used for? Why use it over DataStores?

1 Like

Mine is literally just using php get to urls with no validation and it’s vunerable to sql injection, I am planning on fixing it eventually but I’m the only one who will ever have access to the urls so I don’t mind to much.

I honestly cant say I feel safe using a project when someone says a exploit is impossible. Granted I know its easy to stop most SQL Injections but from my experience in penetrating testing, you should never be gullible and assume you are completely safe.

I run a clan database service and I completely understand why some will not want to use my free service because their group will rely on me running it for the next 3 to 5 years and afford it. Granted I have premium so I’m able to keep it running. I’m still afraid on attacks, I learn everyday how to prevent it as much as possible.

I would not put the data for my game on a service I dont run personally anyways because if it goes down then I am screwed and my entire player base will quit.

If anyone uses this… Backup the data with DataStores on roblox. I plan to use my own service for a game soon for cross game data but even I want to keep redundancy and fail safes because everything including uptime is guaranteed.

That’s really a given to back up data that is used on and online, non Roblox datarores, they won’t be on forever and you aren’t garunteed uptime. This service does run 24/7 and doesn’t shut down. I test all updates on my local machine to avoid any errors and bugs when I go live with the update.

Cross place databases. Since Roblox datastores data is only accessable on the place it is stored, if you want to be use that data on another place it’s impossible without something like this, granted if you were going to use something like this for a serious projec,t you would host it yourself as uptime and stability aren’t required, since I am not bound by any legal contract.

1 Like

You may want to consider checking your https support. Not only do the links you provide are in http and don’t force redirect to https, https fails to connect due to configuration issues. Until you fix, you put account/user data information at risk of being hijacked across transmission. This happens on both desktop and mobile, just happen to be on mobile at time of picture.

EDIT:
Image of error

1 Like

So basically you are saying even when roblox has DataStores down for whatever reason yours will still be running. I dont see that happening. As for pushing updates to a server and it not going down, thats arrogant to say the least speaking from experience because there is always something that will happen eventually that causes an issue. You wont often find these issues until someone complains.

I was saying that mine won’t be on forever since I am not obliged to maintain them and keep them online. That’s why I talked about backing the data up and storing it elsewhere.

You may want to double-check your source code. I see at least one place with an unsanitized parameter: GSCKStore/verify.php at master · pushgsck/GSCKStore · GitHub

I’d recommend taking a look at PHP’s prepared statements and using those instead of building the queries yourself, as it means you won’t be subject to injection. PHP: Prepared Statements - Manual

4 Likes

Is it okay if we use this for Super Power Training Sim?

I mean Roblox their Datastores are sufficient when you only need to use the data for one place / universe. This is only really useful when you want to access the Datastore from another game that is not from the universe.

1 Like