Hm, looking at the site: If he only cares about Handling, then it's really not much of a big deal what he does. Just stay away from Handling. You guys have come up with levels many times better than that one anyway :P
In any case, it's troubling that he managed to get around having to pay, and also that he claims to have so much control over design data. I
re-brought this up with some other people, and here's what one of our programmers had to say about it:
It looks like all he’s doing is opening an official level, editing the actual XML that gets uploaded, and inserting his own level code, then saving it as a design. Then because it’s a design tied to an official level, the game lets you play it.
FC1 does little if any validation of the input to the server. FC2 is a bit different- The same type of thing could be done, but would be far more difficult and far easier for us to correct.
In other words, his hack works by piggybacking off existing free levels, and is subservient to the database, not the other way around. So his claims of being able to delete designs or alter level ratings are most likely bogus. At best, he has that control only over levels he himself has made. But even then I'm skeptical.
To take action, we
could remove everything he's done - but we can't really stop him from starting over. Even ban
ning his account and IP would only stop him from posting new designs to
that account from
that IP, and if you're clever enough to figure out how to edit poorly obfuscated XML code, you're probably clever enough to use an IP proxy. So any action we take directly at fchacked would be temporary. We could try to fix the actual exploit...but that would require a complete overhaul of the game, and we honestly don't have the time or resources for that at the moment (or rather, we
did have the time and resources for that a little while ago...and we used them to make FC2)