[Warning] Regarding Tampermonkey-scripts

A brief warning about tampermonkey-scripts

So, in newspapers, discords etc. I have seen a lot of tampermonkeyscripts being shared. Their basically a way to modify the game experience. Recently i saw a cool article about someone creating a damage calculator which showed up in game. Although i havent looked at the script, or tried it.

As to my understanding, the rules are okay with this. As long as you dont automate stuff - Like working, fighting, etc. So this is not my concern.

The concern i have, is that probably a lot of people are unaware of the consequences of just pasting code inside the browser they maybe not understand.

Really Basic Computer Science

So, behind the scenes - what happens when you log in? You enter your email and password, click login. And youre logged in. Right?

Kind off. Your credentials is sent to eclesiars servers (and you do some captcha stuff, but thats not really important here).

If the login is successful - the server gives you a cookie. This cookie can be seen as your key. It shows that i am "Jeppe" in game, it basically is what keeps me logged in. It also uses this as an  "Authorization Token". Which is sent with every request. Every time i hit in a battle, buys stuffs on the market, makes a contract. etc

The risk here - is that since you're letting tampermonkey access your browser, it also has access to your cookies. Its totally possible to fool someone by doing something legitimate. But then also steal your cookie. Gain access to your account and drain its gold. 


This is a really simple example, and pretty obvious. But this code could be more obfuscated, and harder to catch the cookie-stealing.

What im saying

So, what i want to emphasize, is that you should be really careful when pasting other peoples scripts into your browser, or in this case tampermonkey. Tampermonkey can do awesome stuff, and im not against using it. But if youre not that tech-savy, and dont really understand the code youre about to paste. Maybe you shouldnt paste it in.  Or atleast be aware of the risks.

I just saw an article about a dmg-calculator Introducing Eclesiar Set Calculator / The Great Wall Times

I havent looked at the tampermonkeyscript in any way. But they also included a google-sheet calculator, which i think is great, due to the reasons i stated before.