LÖVE

ivan wrote: ↑Thu Jun 21, 2018 5:34 pm

Master Thief wrote: ↑Thu Jun 21, 2018 3:41 pm Especially that about permissions. As far as I'm aware permissions are only usually denied in mobile and web platforms, which I don't make anything for (so far, at least).

Depends on the platform. Windows does have the option for "restricted" accounts too.
Apps are NOT supposed to save data in the installation folder
so that the size of the install folder remains constant which is important in cases like mobile.
Or what if I'm oldschool and I'm running your game off read-only memory like a CD or DVD?
Or what if you're using a distribution service/client like Steam that syncs the install folder automatically?

I don't agree with ivan's suggestions that INI files have been gone for a long time. They're super useful for changing game settings when you can't do that ingame, due to wrong game settings! And also a bunch of other stuff. They're still used for many commercial games and nearly every game has an ini file in it's directory or subdir.

I'm sure INI files are still floating around, but it's a legacy thing.
Haven't heard of any new developments around the INI format.

function Ini:get_value(key)
    assert(self._by_key[key], "\n\n    (Ini) Assertion failed:\n\n\t    Key '".. key .."' doesn't exist.\n\n")
    return self._by_cat[ self._by_key[key] ][key]      end

function Ini:get_bool(key)
    return self:get_value( key ) ~= '0' 
    and self:get_value( key ) ~= 'false' end

function Ini:get_number(key) return tonumber(self:get_value( key )) end
function Ini:get_string(key) return self:get_value( key ) end
function Ini:get_table(key) return self:parse_table(self:get_value( key )) end
function Ini:get_color(key) return self:parse_color(self:get_value( key )) end
function Ini:parse_color(c) 
    if c == nil then return {1, 1, 1, 1} end
    local r, g, b, a

    if c:starts_with("{") then
        c = c:sub(2, -2):gsub(' ', ''):split(',')
        -- num() is just a shorthand for tonumber() that I made
        r, g, b, a = num(c[1]) or 1, num(c[2]) or 1, num(c[3]) or 1, num(c[4]) or 1
        c = { r, g, b, a }
    elseif c:starts_with("#") then
        r = num(c:sub(2, 3), 16) / 255
        g = num(c:sub(4, 5), 16) / 255
        b = num(c:sub(6, 7), 16) / 255
        a = num(c:sub(8, 9), 16) / 255
        c = {r, g, b, a}
    end
    return c
end

ivan wrote: ↑Thu Jun 21, 2018 5:34 pm Depends on the platform. Windows does have the option for "restricted" accounts too.
Apps are NOT supposed to save data in the installation folder
so that the size of the install folder remains constant which is important in cases like mobile.
Or what if I'm oldschool and I'm running your game off read-only memory like a CD or DVD?
Or what if you're using a distribution service/client like Steam that syncs the install folder automatically?

grump wrote: ↑Thu Jun 21, 2018 7:51 pmDon't expect the user to be able to edit configuration files that are saved outside his home directory.

KayleMaster wrote: ↑Thu Jun 21, 2018 6:17 pm Do I need to sanitize the lua file somehow?

grump wrote: ↑Thu Jun 21, 2018 7:51 pm setfenv is probably all you need to make configuration data secure.

Master Thief wrote: ↑Thu Jun 21, 2018 6:45 pm On the other hand, when the user uninstalls an app, litter will be left lying around in appdata.

pgimeno wrote: ↑Thu Jun 21, 2018 10:31 pm I may be pretty much alone in thinking that using Lua for configuration files is not a good idea. There are several reasons, but the main ones are DoS and memory.

pgimeno wrote: ↑Thu Jun 21, 2018 10:31 pmJSON is also good.

Master Thief wrote: ↑Thu Jun 21, 2018 10:02 pm

grump wrote: ↑Thu Jun 21, 2018 7:51 pmDon't expect the user to be able to edit configuration files that are saved outside his home directory.

I think that for just about every game I played that had editable files in system specific folders, I saw people asking online where to find them.