34 Commits

Author SHA1 Message Date
Znote
f64d190e54 validate_ip bugfix 2021-12-15 23:31:02 +01:00
Znote
4b0db861d5 Fix #429 Various warnings
Rewrote other characters on this account list in characterprofile
Added hash_equal() backport for low PHP versions
Fixed some warnings
2020-07-08 00:35:45 +02:00
divinity76
c5323dbc78 admin.php protection against XSS and CSRF (#367)
admin.php protection against XSS and CSRF
see https://github.com/Znote/ZnoteAAC/issues/361 for more info
2019-08-27 00:25:51 +02:00
divinity76
01c5da322a html-encode dynamic values in buypoints.php (#364)
* add html encoding function

* html-encode dynamic values

important if the values contain special characters like '&<>"

(for example if $config['site_title'] is `AT&T` or `<AWESOMESERVER>`, the old code would generate invalid html, but this updated code will generate valid html.)
2019-08-26 02:11:02 +02:00
Znote
ce3fcf3b51 Fixed OTHIRE forum accountAccess check 2019-04-12 02:32:07 +02:00
Znote
a76e468645 Retrieve descriptive vocation name if id is not configured. 2019-04-03 22:46:24 +02:00
Znote
32bbecd266 Fix ##295 Rounding discount in buypoints 2019-03-17 14:53:11 +01:00
Rodrigo Paixão
bbd0455463 Admin Page - Compatibility OTHire (#342)
-- Fix for Admin Page in OTHire
2019-03-12 15:35:02 +01:00
slawkens
0478566020 Refactor Google ReCaptcha code (#325)
Removed duplicated code (store it in function/general.php)

Captcha doesn't need cURL (made it configurable and optional)
2018-06-04 12:41:49 +02:00
Znote
0b442e9095 Remade serverinfo.php. Loads stages.xml, imports config.lua from textarea instead of requiring access to OT directory. Gives much more server information. 2017-02-16 04:38:02 +01:00
Znote
a682fef4ae TFS 0.3 flags highscores fix.
Also added missing function for spells parser.
2017-02-11 03:38:10 +01:00
Znote
2fad7a3efb Improved flags system & reduce query usage in online list
Using http://flag.znote.eu as an external image server for flags.
Online list is now stored in a 30 seconds quick cache.
Reduced query usage in online list to 1 instead of 1 + players online amounts of queries.
2017-01-26 22:09:53 +01:00
Znote
6c036b0a1b Log IP performance issue workaround.
1000 latest records should suffice for the system to function properly.
An OT server had issues when ip logger saved over 250 000 IPs (probably some sort of ddos attack), which got loaded into memory in each page render.
2017-01-07 03:37:23 +01:00
Znote
deddeb462c Fixed highscores being broken when cache system is enabled.
Highscore cache data now stores vocation group store data, and flag value if enabled in config.php
No extra queries are being made after the scores have been loaded from cache.
2016-12-31 04:05:15 +01:00
Znote
c3c236e13e TFS 1.2+ Two-Factor Authentication system.
RFC6238 Implementation of the OTP algorythm, tested with the app "Authy" from the iOS iPhone app store.
2016-11-13 05:34:14 +01:00
Znote
0dc15ea95b Using a config variable to define protocol and domain name instead of $_SERVER as it seems inconsistent. fix #182 and #225 2016-10-24 01:51:52 +02:00
Stefan A. Brannfjell
5f03d514e7 Merge pull request #240 from gpedro/feat/config-lua-parser
feat: getConfigLua added into engine/general
2016-05-17 02:15:34 +02:00
Gabriel Pedro
1cc404faaa feat: getConfigLua added into engine/general 2016-05-14 14:47:40 -04:00
Gabriel Pedro
4e18cb3c66 resolves #214 2016-05-11 18:32:51 -04:00
Gabriel Pedro
ae28021d86 resolves #71 2016-05-02 12:47:30 -04:00
Kristoffer Eklund
75833e7fbe Recode validate_name() function 2015-06-20 18:35:12 +02:00
Znote
da8feec5d8 http://3.ii.gl/nhabjNNZb.png Guild list now also shows logo, motd, average level and guild level 2014-11-15 20:35:58 +01:00
Stefan Brannfjell
8ab9f11ef5 Session prefix, if you are hosting multiple sites, make the session name different to avoid conflict. 2014-09-06 13:43:49 +02:00
Stefan Brannfjell
a6babfe0e3 When uploading guild images, it will give you an error message if it fails.
Guild motd will display on guild page, and the leader can also update it.
Fixed two bugs with name change in shop. (sync error and name validation)
Fixed some warnings.
My account now shows how many days you have of premium account.
2014-06-15 00:55:50 +02:00
rigaer@hotmail.es
721a52867f Guild logo upload 2014-05-18 20:28:11 +02:00
Daniel Björkholm
d503b0bb14 Small fix for TFS 0.3/0.4 2014-05-02 12:59:48 +02:00
Daniel Björkholm
70b6940f82 Add #74 and #75 2014-05-02 12:31:57 +02:00
Daniel
c83cbb14ab Fixed error in url() function
Sometimes url() function produced URL with unnecessary slash, eg.
`http://dalerium.net//register.php` - that's fixed.
2014-03-30 23:16:11 +02:00
Stefan Brannfjell
733766dd45 Started with JSON API module system 2014-03-09 04:42:28 +01:00
Stefan Brannfjell
470bf6caa6 Added new shop type: Change character name (using type 4 for this). If you got custom scripts make sure to edit accordingly.
And players can change name in My Account if they have ticket from shop. #15
2014-02-16 13:33:16 +01:00
Stefan Brannfjell
1946d87911 Code optimisations for localhost:IPv6 #17 2014-02-08 20:34:00 +01:00
Stefan Brannfjell
801e0bcbef Fixes escape string by using custom function #18 2014-02-06 22:51:05 +01:00
Stefan Brannfjell
7a5a4eb410 Mysqli support added. Many functions improved. 2014-02-02 20:23:00 +01:00
Stefan Brannfjell
21dea78379 Znote AAC rev 168 from subversion. 2013-08-28 23:46:32 +02:00