Merge branch 'develop' into feature/settings

.github/workflows/phplint.yml

@@ -1,13 +1,16 @@
 name: PHP Linting
 on:
   pull_request:
-    branches: [master, develop]
+    branches: [develop]
   push:
-    branches: [master]
+    branches: [develop]
 
 jobs:
   phplint:
     runs-on: ubuntu-latest
     steps:
-        - uses: actions/checkout@v1
+      - uses: actions/checkout@v3
-        - uses: michaelw90/PHP-Lint@master
+      - uses: overtrue/phplint@8.2
+        with:
+          path: .
+          options: --exclude=*.log

CHANGELOG.md

@@ -1,9 +1,52 @@
 # Changelog
 
-## [0.9.0 - x.x.2020]
+## [0.9.0-alpha - x.x.2023]
+
+Minimum PHP version for this release is 7.2.5.
 
 ### Added
+* reworked Admin Panel (@Leesneaks, @gpedro, @slawkens)
+  * updated to Bootstrap v4
+  * new Menu
+  * new Dashboard: statistics, server status
+  * new Admin Bar showed on top when admin logged in
+  * new page: Server Data, to reload server data
+  * new pages: mass account & teleport tools
+  * editable changelogs
+  * revised Accounts & Players editors
+  * option to add/modify menus with plugins
+  * better, updated TinyMCE editor (v6.x)
+    * with option to upload images
+  * list of open source libraries used in project
+* brand new charming installation page (by @fernandomatos)
+  * using Bootstrap
+* new pages router: nikic/fast-route, allowing for better customisation
+* Guild Wars support (available as plugin)
+* support for login and create account only by email (configurable)
+  * with no need for account name
+* Google ReCAPTCHA v3 support (available as plugin)
+* automatically load towns names from .OTBM file
+* support for Account Number
+  * suggest account number option
+* many new functions, hooks and configurables
 
 ### Changed
+* Composer is now used for external libraries like: Twig, PHPMailer, fast-route etc.
+* mail support is disabled on fresh install, can be manually enabled by user
+* don't show PHP errors on prod
+* disable add php pages in admin panel for security. Option to disable plugins upload
+* visitors counter shows now user browser, and also if its bot
+* changes in required and optional PHP extensions
+* reworked Pages:
+	* Bans
+		* works now for TFS 1.x
+	* Highscores
+		* frags works for TFS 1.x
+		* cached
+* moved pages to Twig:
+  * experience stages
+* update player_deaths entries on name change
+* change_password email to be more informal
 
 ### Fixed
+* hundrets of bug fixes, mostly patched from 0.8, so it makes no sense writing them again here

README.md

@@ -36,7 +36,7 @@ Official website: https://my-aac.org
 			chmod 660 images/guilds
 			chmod 660 images/houses
 			chmod 660 images/gallery
-			chmod -R 770 system/cache
+			chmod -R 760 system/cache
 
 	Visit http://your_domain/install (http://localhost/install) and follow instructions in the browser.
 

admin/index.php

@@ -29,6 +29,11 @@ define('PAGE', $page);
 require SYSTEM . 'functions.php';
 require SYSTEM . 'init.php';
 
+// verify myaac tables exists in database
+if(!$db->hasTable('myaac_account_actions')) {
+	throw new RuntimeException('Seems that the table <strong>myaac_account_actions</strong> of MyAAC doesn\'t exist in the database. This is a fatal error. You can try to reinstall MyAAC by visiting <a href="' . BASE_URL . 'install">this</a> url.');
+}
+
 if(config('env') === 'dev') {
 	ini_set('display_errors', 1);
 	ini_set('display_startup_errors', 1);

admin/pages/accounts.php

@@ -16,6 +16,11 @@ $use_datatable = true;
 if ($config['account_country'])
 	require SYSTEM . 'countries.conf.php';
 
+$nameOrNumberColumn = 'name';
+if (USE_ACCOUNT_NUMBER) {
+	$nameOrNumberColumn = 'number';
+}
+
 $hasSecretColumn = $db->hasColumn('accounts', 'secret');
 $hasCoinsColumn = $db->hasColumn('accounts', 'coins');
 $hasPointsColumn = $db->hasColumn('accounts', 'premium_points');
@@ -48,16 +53,16 @@ else if (isset($_REQUEST['search'])) {
 	if (strlen($search_account) < 3 && !Validator::number($search_account)) {
 		echo_error('Player name is too short.');
 	} else {
-		$query = $db->query('SELECT `id` FROM `accounts` WHERE `name` = ' . $db->quote($search_account));
+		$query = $db->query('SELECT `id` FROM `accounts` WHERE `' . $nameOrNumberColumn . '` = ' . $db->quote($search_account));
 		if ($query->rowCount() == 1) {
 			$query = $query->fetch();
 			$id = (int)$query['id'];
 		} else {
-			$query = $db->query('SELECT `id`, `name` FROM `accounts` WHERE `name` LIKE ' . $db->quote('%' . $search_account . '%'));
+			$query = $db->query('SELECT `id`, `' . $nameOrNumberColumn . '` FROM `accounts` WHERE `' . $nameOrNumberColumn . '` LIKE ' . $db->quote('%' . $search_account . '%'));
 			if ($query->rowCount() > 0 && $query->rowCount() <= 10) {
 				$str_construct = 'Do you mean?<ul class="mb-0">';
 				foreach ($query as $row)
-					$str_construct .= '<li><a href="' . $admin_base . '&id=' . $row['id'] . '">' . $row['name'] . '</a></li>';
+					$str_construct .= '<li><a href="' . $admin_base . '&id=' . $row['id'] . '">' . $row[$nameOrNumberColumn] . '</a></li>';
 				$str_construct .= '</ul>';
 				echo_error($str_construct);
 			} else if ($query->rowCount() > 10)
@@ -145,7 +150,7 @@ else if (isset($_REQUEST['search'])) {
 			$web_lastlogin = strtotime($_POST['web_lastlogin']);
 			verify_number($web_lastlogin, 'Web Last login', 11);
 
-			if (!$error) {
+			if (!$error && $hooks->trigger(HOOK_ADMIN_ACCOUNTS_SAVE_POST, ['account_id' => $account->getId(), 'account_email' =>  $account->getEMail()])) {
 				if (USE_ACCOUNT_NAME) {
 					$account->setName($name);
 				}
@@ -203,7 +208,7 @@ else if (isset($_REQUEST['search'])) {
 			}
 		}
 	} else if ($id == 0) {
-		$accounts_db = $db->query('SELECT `id`, `name`' . ($hasTypeColumn ? ',type' : ($hasGroupColumn ? ',group_id' : '')) . ' FROM `accounts` ORDER BY `id` ASC');
+		$accounts_db = $db->query('SELECT `id`, `' . $nameOrNumberColumn . '`' . ($hasTypeColumn ? ',type' : ($hasGroupColumn ? ',group_id' : '')) . ' FROM `accounts` ORDER BY `id` ASC');
 		?>
 		<div class="col-12 col-sm-12 col-lg-10">
 			<div class="card card-info card-outline">
@@ -215,7 +220,7 @@ else if (isset($_REQUEST['search'])) {
 						<thead>
 						<tr>
 							<th>ID</th>
-							<th>Name</th>
+							<th><?= ($nameOrNumberColumn == 'number' ? 'Number' : 'Name'); ?></th>
 							<?php if($hasTypeColumn || $hasGroupColumn): ?>
 							<th>Position</th>
 							<?php endif; ?>
@@ -226,7 +231,7 @@ else if (isset($_REQUEST['search'])) {
 						<?php foreach ($accounts_db as $account_lst): ?>
 							<tr>
 								<th><?php echo $account_lst['id']; ?></th>
-								<td><?php echo $account_lst['name']; ?></a></td>
+								<td><?php echo $account_lst[$nameOrNumberColumn]; ?></a></td>
 								<?php if($hasTypeColumn || $hasGroupColumn): ?>
 								<td>
 									<?php if ($hasTypeColumn) {
@@ -284,6 +289,11 @@ else if (isset($_REQUEST['search'])) {
 											<label for="name">Account Name:</label>
 											<input type="text" class="form-control" id="name" name="name" autocomplete="off" value="<?php echo $account->getName(); ?>"/>
 										</div>
+									<?php elseif (USE_ACCOUNT_NUMBER): ?>
+										<div class="col-12 col-sm-12 col-lg-4">
+											<label for="name">Account Number:</label>
+											<input type="text" class="form-control" id="name" name="name" autocomplete="off" value="<?php echo $account->getNumber(); ?>"/>
+										</div>
 									<?php endif; ?>
 									<div class="col-12 col-sm-12 col-lg-5">
 										<div class="form-check">

admin/pages/mailer.php

@@ -16,7 +16,7 @@ if (!hasFlag(FLAG_CONTENT_MAILER) && !superAdmin()) {
 }
 
 if (!config('mail_enabled')) {
-	echo 'Mail support disabled.';
+	echo 'Mail support disabled in config.';
 	return;
 }
 

admin/pages/pages.php

@@ -76,18 +76,18 @@ if (!empty($action)) {
 			$enable_tinymce = $_page['enable_tinymce'] == '1';
 			$access = $_page['access'];
 		} else {
-			if(Pages::update($id, $name, $p_title, $body, $player_id, $php, $enable_tinymce, $access)) {
+			if(Pages::update($id, $name, $p_title, $body, $player_id, $php, $enable_tinymce, $access, $errors)) {
 				$action = $name = $p_title = $body = '';
 				$player_id = 1;
 				$access = 0;
 				$php = false;
 				$enable_tinymce = true;
-				success("Updated successful.");
+				success('Updated successful.');
 			}
 		}
 	} else if ($action == 'hide') {
 		Pages::toggleHidden($id, $errors, $status);
-		success(($status == 1 ? 'Show' : 'Hide') . " successful.");
+		success(($status == 1 ? 'Show' : 'Hide') . ' successful.');
 	}
 
 	if (!empty($errors))
@@ -152,6 +152,10 @@ class Pages
 			$errors[] = 'Enable PHP is wrong.';
 			return false;
 		}
+		if ($php == 1 && !getBoolean(config('admin_pages_php_enable'))) {
+			$errors[] = 'PHP pages disabled on this server. To enable go to config.php and change admin_pages_php_enable to "yes".';
+			return false;
+		}
 		if(!isset($enable_tinymce) || ($enable_tinymce != 0 && $enable_tinymce != 1)) {
 			$errors[] = 'Enable TinyMCE is wrong.';
 			return false;
@@ -200,7 +204,7 @@ class Pages
 		return !count($errors);
 	}
 
-	static public function update($id, $name, $title, $body, $player_id, $php, $enable_tinymce, $access)
+	static public function update($id, $name, $title, $body, $player_id, $php, $enable_tinymce, $access, &$errors)
 	{
 		if(!self::verify($name, $title, $body, $player_id, $php, $enable_tinymce, $access, $errors)) {
 			return false;

admin/pages/players.php

@@ -663,7 +663,14 @@ else if (isset($_REQUEST['search'])) {
 									</div>
 									<div class="col-12 col-sm-12 col-lg-6">
 										<label for="lastip" class="control-label">Last IP:</label>
-										<input type="text" class="form-control" id="lastip" name="lastip" autocomplete="off" maxlength="10" value="<?php echo longToIp($player->getLastIP()); ?>" readonly/>
+										<input type="text" class="form-control" id="lastip" name="lastip" autocomplete="off" maxlength="10" value="<?php
+										if (strlen($player->getLastIP()) > 11) {
+											echo inet_ntop($player->getLastIP());
+										}
+										else {
+											echo longToIp($player->getLastIP());
+										}
+										?>" readonly/>
 									</div>
 								</div>
 								<?php if ($db->hasColumn('players', 'loss_experience')): ?>

admin/pages/plugins.php

@@ -13,98 +13,119 @@ $use_datatable = true;
 
 require_once LIBS . 'plugins.php';
 
-$twig->display('admin.plugins.form.html.twig');
+if (!getBoolean(config('admin_plugins_manage_enable'))) {
+	warning('Plugin installation and management is disabled in config.<br/>If you wish to enable, go to config.php and change <b>admin_plugins_manage_enable</b> to "yes".');
+}
+else {
+	$twig->display('admin.plugins.form.html.twig');
 
-if (isset($_REQUEST['uninstall'])) {
+	if (isset($_REQUEST['uninstall'])) {
-	$uninstall = $_REQUEST['uninstall'];
+		$uninstall = $_REQUEST['uninstall'];
 
-	if (Plugins::uninstall($uninstall)) {
+		if (Plugins::uninstall($uninstall)) {
-		success('Successfully uninstalled plugin ' . $uninstall);
+			success('Successfully uninstalled plugin ' . $uninstall);
-	} else {
+		} else {
-		error('Error while uninstalling plugin ' . $uninstall . ': ' . Plugins::getError());
+			error('Error while uninstalling plugin ' . $uninstall . ': ' . Plugins::getError());
-	}
-} else if (isset($_FILES["plugin"]["name"])) {
-	$file = $_FILES["plugin"];
-	$filename = $file["name"];
-	$tmp_name = $file["tmp_name"];
-	$type = $file["type"];
-
-	$name = explode(".", $filename);
-	$accepted_types = array('application/zip', 'application/x-zip-compressed', 'multipart/x-zip', 'application/x-compressed', 'application/octet-stream', 'application/zip-compressed');
-
-	if (isset($file['error'])) {
-		$error = 'Error uploading file';
-		switch ($file['error']) {
-			case UPLOAD_ERR_OK:
-				$error = false;
-				break;
-			case UPLOAD_ERR_INI_SIZE:
-			case UPLOAD_ERR_FORM_SIZE:
-				$error .= ' - file too large (limit of ' . ini_get('upload_max_filesize') . ' bytes). You can enlarge the limits by changing "upload_max_filesize" in php.ini';
-				break;
-			case UPLOAD_ERR_PARTIAL:
-				$error .= ' - file upload was not completed.';
-				break;
-			case UPLOAD_ERR_NO_FILE:
-				$error .= ' - zero-length file uploaded.';
-				break;
-			default:
-				$error .= ' - internal error #' . $file['error'];
-				break;
 		}
-	}
+	} else if (isset($_REQUEST['enable'])) {
+		$enable = $_REQUEST['enable'];
+		if (Plugins::enable($enable)) {
+			success('Successfully enabled plugin ' . $enable);
+		} else {
+			error('Error while enabling plugin ' . $enable . ': ' . Plugins::getError());
+		}
+	} else if (isset($_REQUEST['disable'])) {
+		$disable = $_REQUEST['disable'];
+		if (Plugins::disable($disable)) {
+			success('Successfully disabled plugin ' . $disable);
+		} else {
+			error('Error while disabling plugin ' . $disable . ': ' . Plugins::getError());
+		}
+	} else if (isset($_FILES['plugin']['name'])) {
+		$file = $_FILES['plugin'];
+		$filename = $file['name'];
+		$tmp_name = $file['tmp_name'];
+		$type = $file['type'];
 
-	if (isset($error) && $error != false) {
+		$name = explode('.', $filename);
-		error($error);
+		$accepted_types = array('application/zip', 'application/x-zip-compressed', 'multipart/x-zip', 'application/x-compressed', 'application/octet-stream', 'application/zip-compressed');
-	} else {
-		if (is_uploaded_file($file['tmp_name'])) {
-			$filetype = strtolower(pathinfo($filename, PATHINFO_EXTENSION));
-			if ($filetype == 'zip') // check if it is zipped/compressed file
-			{
-				$tmp_filename = pathinfo($filename, PATHINFO_FILENAME);
-				$targetzip = BASE . 'plugins/' . $tmp_filename . '.zip';
 
-				if (move_uploaded_file($tmp_name, $targetzip)) { // move uploaded file
+		if (isset($file['error'])) {
-					if (Plugins::install($targetzip)) {
+			$error = 'Error uploading file';
-						foreach (Plugins::getWarnings() as $warning) {
+			switch ($file['error']) {
-							warning($warning);
+				case UPLOAD_ERR_OK:
+					$error = false;
+					break;
+				case UPLOAD_ERR_INI_SIZE:
+				case UPLOAD_ERR_FORM_SIZE:
+					$error .= ' - file too large (limit of ' . ini_get('upload_max_filesize') . ' bytes). You can enlarge the limits by changing "upload_max_filesize" in php.ini';
+					break;
+				case UPLOAD_ERR_PARTIAL:
+					$error .= ' - file upload was not completed.';
+					break;
+				case UPLOAD_ERR_NO_FILE:
+					$error .= ' - zero-length file uploaded.';
+					break;
+				default:
+					$error .= ' - internal error #' . $file['error'];
+					break;
+			}
+		}
+
+		if (isset($error) && $error != false) {
+			error($error);
+		} else {
+			if (is_uploaded_file($file['tmp_name'])) {
+				$filetype = strtolower(pathinfo($filename, PATHINFO_EXTENSION));
+				if ($filetype == 'zip') // check if it is zipped/compressed file
+				{
+					$tmp_filename = pathinfo($filename, PATHINFO_FILENAME);
+					$targetzip = BASE . 'plugins/' . $tmp_filename . '.zip';
+
+					if (move_uploaded_file($tmp_name, $targetzip)) { // move uploaded file
+						if (Plugins::install($targetzip)) {
+							foreach (Plugins::getWarnings() as $warning) {
+								warning($warning);
+							}
+
+							$info = Plugins::getPluginJson();
+							success((isset($info['name']) ? '<strong>' . $info['name'] . '</strong> p' : 'P') . 'lugin has been successfully installed.');
+						} else {
+							$error = Plugins::getError();
+							error(!empty($error) ? $error : 'Unexpected error happened while installing plugin. Please try again later.');
 						}
 
-						$info = Plugins::getPluginJson();
+						unlink($targetzip); // delete the Zipped file
-						success((isset($info['name']) ? '<strong>' . $info['name'] . '</strong> p' : 'P') . 'lugin has been successfully installed.');
+					} else
-					} else {
+						error('There was a problem with the upload. Please try again.');
-						$error = Plugins::getError();
+				} else {
-						error(!empty($error) ? $error : 'Unexpected error happened while installing plugin. Please try again later.');
+					error('The file you are trying to upload is not a .zip file. Please try again.');
-					}
+				}
-
-					unlink($targetzip); // delete the Zipped file
-				} else
-					error('There was a problem with the upload. Please try again.');
 			} else {
-				error('The file you are trying to upload is not a .zip file. Please try again.');
+				error('Error uploading file - unknown error.');
 			}
-		} else {
-			error('Error uploading file - unknown error.');
 		}
 	}
 }
 
 $plugins = array();
-foreach (get_plugins() as $plugin) {
+foreach (get_plugins(true) as $plugin) {
 	$string = file_get_contents(BASE . 'plugins/' . $plugin . '.json');
-	$string = Plugins::removeComments($string);
 	$plugin_info = json_decode($string, true);
 
-	if ($plugin_info == false) {
+	if (!$plugin_info) {
 		warning('Cannot load plugin info ' . $plugin . '.json');
 	} else {
+		$disabled = (strpos($plugin, 'disabled.') !== false);
+		$pluginOriginal = ($disabled ? str_replace('disabled.', '', $plugin) : $plugin);
 		$plugins[] = array(
-			'name' => isset($plugin_info['name']) ? $plugin_info['name'] : '',
+			'name' => $plugin_info['name'] ?? '',
-			'description' => isset($plugin_info['description']) ? $plugin_info['description'] : '',
+			'description' => $plugin_info['description'] ?? '',
-			'version' => isset($plugin_info['version']) ? $plugin_info['version'] : '',
+			'version' => $plugin_info['version'] ?? '',
-			'author' => isset($plugin_info['author']) ? $plugin_info['author'] : '',
+			'author' => $plugin_info['author'] ?? '',
-			'contact' => isset($plugin_info['contact']) ? $plugin_info['contact'] : '',
+			'contact' => $plugin_info['contact'] ?? '',
-			'file' => $plugin,
+			'file' => $pluginOriginal,
+			'enabled' => !$disabled,
 			'uninstall' => isset($plugin_info['uninstall'])
 		);
 	}

admin/pages/visitors.php

@@ -8,6 +8,11 @@
  * @link      https://my-aac.org
  */
 defined('MYAAC') or die('Direct access not allowed!');
+
+use DeviceDetector\DeviceDetector;
+use DeviceDetector\Parser\Client\Browser;
+use DeviceDetector\Parser\OperatingSystem;
+
 $title = 'Visitors';
 $use_datatable = true;
 
@@ -30,6 +35,31 @@ function compare($a, $b)
 $tmp = $visitors->getVisitors();
 usort($tmp, 'compare');
 
+foreach ($tmp as &$visitor) {
+	$userAgent = $visitor['user_agent'] ?? '';
+	if (!strlen($userAgent) || $userAgent == 'unknown') {
+		$browser = 'Unknown';
+	}
+	else {
+		$dd = new DeviceDetector($userAgent);
+		$dd->parse();
+
+		if ($dd->isBot()) {
+			$bot = $dd->getBot();
+			$message = '(Bot) %s, <a href="%s" target="_blank">%s</a>';
+			$browser = sprintf($message, $bot['category'], $bot['url'], $bot['name']);
+		}
+		else {
+			$osFamily = OperatingSystem::getOsFamily($dd->getOs('name'));
+			$browserFamily = Browser::getBrowserFamily($dd->getClient('name'));
+
+			$browser = $osFamily . ', ' . $browserFamily;
+		}
+	}
+
+	$visitor['browser'] = $browser;
+}
+
 $twig->display('admin.visitors.html.twig', array(
 	'config_visitors_counter_ttl' => $config['visitors_counter_ttl'],
 	'visitors' => $tmp

common.php

@@ -27,7 +27,7 @@ if (version_compare(phpversion(), '7.2.5', '<')) die('PHP version 7.2.5 or highe
 
 const MYAAC = true;
 const MYAAC_VERSION = '0.9.0-dev';
-const DATABASE_VERSION = 34;
+const DATABASE_VERSION = 35;
 const TABLE_PREFIX = 'myaac_';
 define('START_TIME', microtime(true));
 define('MYAAC_OS', stripos(PHP_OS, 'WIN') === 0 ? 'WINDOWS' : (strtoupper(PHP_OS) === 'DARWIN' ? 'MAC' : 'LINUX'));

composer.json

@@ -10,6 +10,7 @@
         "composer/semver": "^3.2",
         "twig/twig": "^2.0",
         "erusev/parsedown": "^1.7",
-        "nikic/fast-route": "^1.3"
+        "nikic/fast-route": "^1.3",
+        "matomo/device-detector": "^6.0"
     }
 }

config.php

@@ -210,6 +210,10 @@ $config = array(
 	'status_interval' => 60,
 
 	// admin panel
+	'admin_plugins_manage_enable' => 'yes', // you can disable possibility to upload and uninstall plugins, for security
+	// enable support for plain php pages in admin panel, for security
+	// existing pages still will be working, so you need to delete them manually
+	'admin_pages_php_enable' => 'no',
 	'admin_panel_modules' => 'statistics,web_status,server_status,lastlogin,created,points,coins,balance',    // default - statistics,web_status,server_status,lastlogin,created,points,coins,balance
 
 	// other

install/includes/schema.sql

@@ -1,4 +1,4 @@
-SET @myaac_database_version = 33;
+SET @myaac_database_version = 35;
 
 CREATE TABLE `myaac_account_actions`
 (
@@ -203,6 +203,7 @@ CREATE TABLE `myaac_monsters` (
 	`mana` int(11) NOT NULL DEFAULT 0,
 	`exp` int(11) NOT NULL,
 	`health` int(11) NOT NULL,
+	`look` VARCHAR(255) NOT NULL DEFAULT '',
 	`speed_lvl` int(11) NOT NULL default 1,
 	`use_haste` tinyint(1) NOT NULL,
 	`voices` text NOT NULL,
@@ -340,6 +341,7 @@ CREATE TABLE `myaac_visitors`
 	`ip` VARCHAR(45) NOT NULL,
 	`lastvisit` INT(11) NOT NULL DEFAULT 0,
 	`page` VARCHAR(2048) NOT NULL,
+	`user_agent` VARCHAR(255) NOT NULL DEFAULT '',
 	UNIQUE (`ip`)
 ) ENGINE=InnoDB DEFAULT CHARACTER SET=utf8;
 

install/includes/twig_error.html

@@ -1,4 +1,4 @@
-We have detected that you don't have access to write to the system/cache directory. Under linux you can fix it by using this two command, where first one should be enough (for apache):<br/><br/><span class="console">chown -R www-data.www-data /var/www/*</span><br/><span class="console">chmod -R 660 system/cache</span>
+We have detected that you don't have access to write to the system/cache directory. Under linux you can fix it by using this two command, where first one should be enough (for apache):<br/><br/><span class="console">chown -R www-data.www-data /var/www/*</span><br/><span class="console">chmod -R 760 system/cache</span>
 
 <style type="text/css">
 .console {

install/index.php

@@ -70,7 +70,7 @@ if($step == 'database') {
 
 		$key = str_replace('var_', '', $key);
 
-		if(in_array($key, array('account', 'password', 'password_confirm', 'email', 'player_name'))) {
+		if(in_array($key, array('account', 'account_id', 'password', 'password_confirm', 'email', 'player_name'))) {
 			continue;
 		}
 
@@ -110,14 +110,12 @@ if($step == 'database') {
 	}
 }
 else if($step == 'admin') {
-	$config_failed = true;
+	if(!file_exists(BASE . 'config.local.php') || !isset($config['installed']) || !$config['installed']) {
-	if(file_exists(BASE . 'config.local.php') && isset($config['installed']) && $config['installed'] && isset($_SESSION['saved'])) {
-		$config_failed = false;
-	}
-
-	if($config_failed) {
 		$step = 'database';
 	}
+	else {
+		$_SESSION['saved'] = true;
+	}
 }
 else if($step == 'finish') {
 	$email = $_SESSION['var_email'];

install/steps/5-database.php

@@ -55,12 +55,30 @@ if(!$error) {
 			error($database_error);
 		}
 		else {
-			$twig->display('install.installer.html.twig', array(
+			if(!$db->hasTable('accounts')) {
-				'url' => 'tools/5-database.php',
+				$tmp = str_replace('$TABLE$', 'accounts', $locale['step_database_error_table']);
-				'message' => $locale['loading_spinner']
+				error($tmp);
-			));
+				$error = true;
+			}
+
+			if(!$db->hasTable('players')) {
+				$tmp = str_replace('$TABLE$', 'players', $locale['step_database_error_table']);
+				error($tmp);
+				$error = true;
+			}
+
+			if(!$db->hasTable('guilds')) {
+				$tmp = str_replace('$TABLE$', 'guilds', $locale['step_database_error_table']);
+				error($tmp);
+				$error = true;
+			}
 
 			if(!$error) {
+				$twig->display('install.installer.html.twig', array(
+					'url' => 'tools/5-database.php',
+					'message' => $locale['loading_spinner']
+				));
+
 				if(!Validator::email($_SESSION['var_mail_admin'])) {
 					error($locale['step_config_mail_admin_error']);
 					$error = true;
@@ -86,7 +104,7 @@ if(!$error) {
 					unset($_SESSION['saved']);
 
 					$locale['step_database_error_file'] = str_replace('$FILE$', '<b>' . BASE . 'config.local.php</b>', $locale['step_database_error_file']);
-					warning($locale['step_database_error_file'] . '<br/>
+					error($locale['step_database_error_file'] . '<br/>
 						<textarea cols="70" rows="10">' . $content . '</textarea>');
 				}
 			}

install/steps/7-finish.php

@@ -8,7 +8,7 @@ if(isset($config['installed']) && $config['installed'] && !isset($_SESSION['save
 else {
 	require SYSTEM . 'init.php';
 	if(!$error) {
-		if(USE_ACCOUNT_NAME)
+		if(USE_ACCOUNT_NAME || USE_ACCOUNT_NUMBER)
 			$account = isset($_SESSION['var_account']) ? $_SESSION['var_account'] : null;
 		else
 			$account_id = isset($_SESSION['var_account_id']) ? $_SESSION['var_account_id'] : null;
@@ -65,7 +65,6 @@ else {
 			$new_account->setPassword(encrypt($password));
 			$new_account->setEMail($email);
 
-			$new_account->unblock();
 			$new_account->save();
 
 			$new_account->setCustomField('created', time());

install/tools/5-database.php

@@ -23,24 +23,6 @@ if(!$error) {
 	}
 }
 
-if(!$db->hasTable('accounts')) {
-	$locale['step_database_error_table'] = str_replace('$TABLE$', 'accounts', $locale['step_database_error_table']);
-	error($locale['step_database_error_table']);
-	return;
-}
-
-if(!$db->hasTable('players')) {
-	$locale['step_database_error_table'] = str_replace('$TABLE$', 'players', $locale['step_database_error_table']);
-	error($locale['step_database_error_table']);
-	return;
-}
-
-if(!$db->hasTable('guilds')) {
-	$locale['step_database_error_table'] = str_replace('$TABLE$', 'guilds', $locale['step_database_error_table']);
-	error($locale['step_database_error_table']);
-	return;
-}
-
 if($db->hasTable(TABLE_PREFIX . 'account_actions')) {
 	$locale['step_database_error_table_exist'] = str_replace('$TABLE$', TABLE_PREFIX . 'account_actions', $locale['step_database_error_table_exist']);
 	warning($locale['step_database_error_table_exist']);
@@ -73,13 +55,8 @@ else {
 		success($locale['step_database_adding_field'] . ' accounts.key...');
 }
 
-if(!$db->hasColumn('accounts', 'blocked')) {
-	if(query("ALTER TABLE `accounts` ADD `blocked` TINYINT(1) NOT NULL DEFAULT FALSE COMMENT 'internal usage' AFTER `key`;"))
-		success($locale['step_database_adding_field'] . ' accounts.blocked...');
-}
-
 if(!$db->hasColumn('accounts', 'created')) {
-	if(query("ALTER TABLE `accounts` ADD `created` INT(11) NOT NULL DEFAULT 0 AFTER `" . ($db->hasColumn('accounts', 'group_id') ? 'group_id' : 'blocked') . "`;"))
+	if(query("ALTER TABLE `accounts` ADD `created` INT(11) NOT NULL DEFAULT 0 AFTER `" . ($db->hasColumn('accounts', 'group_id') ? 'group_id' : 'key') . "`;"))
 		success($locale['step_database_adding_field'] . ' accounts.created...');
 }
 

nginx-sample.conf

@@ -7,6 +7,23 @@ server {
 	# increase max file upload
 	client_max_body_size 10M;
 
+	# this is very important, be sure its in your nginx conf - it prevents access to logs etc.
+	location ~ /system {
+		deny all;
+		return 404;
+	}
+
+	# block .htaccess
+	location ~ /\.ht {
+		deny all;
+	}
+
+	# block git files and folders
+	location ~ /\.git {
+		return 404;
+		deny all;
+	}
+
 	location / {
 		try_files $uri $uri/ /index.php;
 	}
@@ -15,15 +32,6 @@ server {
 		include snippets/fastcgi-php.conf;
 		fastcgi_read_timeout 240;
 		fastcgi_pass unix:/var/run/php/php7.4-fpm.sock;
-		# for ubuntu 22.04+ it will be php8.1-sock
+		# for ubuntu 22.04+ it will be php8.1-fpm.-sock
-	}
-
-	location ~ /\.ht {
-		deny all;
-	}
-
-	location /system {
-		deny all;
-		return 404;
 	}
 }

plugins/.htaccess

@@ -1,11 +1,3 @@
 <IfModule mod_autoindex.c>
 	Options -Indexes
 </IfModule>
-
-<IfVersion < 2.4>
-    order allow,deny
-    deny from all
-</IfVersion>
-<IfVersion >= 2.4>
-    Require all denied
-</IfVersion>

system/autoload.php

@@ -1,206 +0,0 @@
-<?php
-namespace MyAAC;
-
-$loader = new \MyAAC\Psr4AutoloaderClass;
-
- // register the autoloader
-$loader->register();
-
-// register the base directories for the namespace prefix
-$loader->addNamespace('Composer\Semver', LIBS . 'semver');
-$loader->addNamespace('Twig', LIBS . 'Twig');
-/**
- * An example of a general-purpose implementation that includes the optional
- * functionality of allowing multiple base directories for a single namespace
- * prefix.
- *
- * Given a foo-bar package of classes in the file system at the following
- * paths ...
- *
- *     /path/to/packages/foo-bar/
- *         src/
- *             Baz.php             # Foo\Bar\Baz
- *             Qux/
- *                 Quux.php        # Foo\Bar\Qux\Quux
- *         tests/
- *             BazTest.php         # Foo\Bar\BazTest
- *             Qux/
- *                 QuuxTest.php    # Foo\Bar\Qux\QuuxTest
- *
- * ... add the path to the class files for the \Foo\Bar\ namespace prefix
- * as follows:
- *
- *      <?php
- *      // instantiate the loader
- *      $loader = new \Example\Psr4AutoloaderClass;
- *
- *      // register the autoloader
- *      $loader->register();
- *
- *      // register the base directories for the namespace prefix
- *      $loader->addNamespace('Foo\Bar', '/path/to/packages/foo-bar/src');
- *      $loader->addNamespace('Foo\Bar', '/path/to/packages/foo-bar/tests');
- *
- * The following line would cause the autoloader to attempt to load the
- * \Foo\Bar\Qux\Quux class from /path/to/packages/foo-bar/src/Qux/Quux.php:
- *
- *      <?php
- *      new \Foo\Bar\Qux\Quux;
- *
- * The following line would cause the autoloader to attempt to load the
- * \Foo\Bar\Qux\QuuxTest class from /path/to/packages/foo-bar/tests/Qux/QuuxTest.php:
- *
- *      <?php
- *      new \Foo\Bar\Qux\QuuxTest;
- */
-class Psr4AutoloaderClass
-{
-	/**
-	 * An associative array where the key is a namespace prefix and the value
-	 * is an array of base directories for classes in that namespace.
-	 *
-	 * @var array
-	 */
-	protected $prefixes = array();
-
-	/**
-	 * Register loader with SPL autoloader stack.
-	 *
-	 * @return void
-	 */
-	public function register()
-	{
-		spl_autoload_register(array($this, 'loadClass'));
-	}
-
-	/**
-	 * Adds a base directory for a namespace prefix.
-	 *
-	 * @param string $prefix The namespace prefix.
-	 * @param string $base_dir A base directory for class files in the
-	 * namespace.
-	 * @param bool $prepend If true, prepend the base directory to the stack
-	 * instead of appending it; this causes it to be searched first rather
-	 * than last.
-	 * @return void
-	 */
-	public function addNamespace($prefix, $base_dir, $prepend = false)
-	{
-		// normalize namespace prefix
-		$prefix = trim($prefix, '\\') . '\\';
-
-		// normalize the base directory with a trailing separator
-		$base_dir = rtrim($base_dir, DIRECTORY_SEPARATOR) . '/';
-
-		// initialize the namespace prefix array
-		if (isset($this->prefixes[$prefix]) === false) {
-			$this->prefixes[$prefix] = array();
-		}
-
-		// retain the base directory for the namespace prefix
-		if ($prepend) {
-			array_unshift($this->prefixes[$prefix], $base_dir);
-		} else {
-			array_push($this->prefixes[$prefix], $base_dir);
-		}
-	}
-
-	/**
-	 * Loads the class file for a given class name.
-	 *
-	 * @param string $class The fully-qualified class name.
-	 * @return mixed The mapped file name on success, or boolean false on
-	 * failure.
-	 */
-	public function loadClass($class)
-	{
-		if (0 === strpos($class, 'Twig_')) {
-			$file = LIBS . 'Twig/' . str_replace(array('_', "\0"), array('/', ''), $class).'.php';
-
-			if((config('env') === 'dev') && !is_file($file)) {
-				return false;
-			}
-
-			require $file;
-			return false;
-		}
-
-		// the current namespace prefix
-		$prefix = $class;
-
-		// work backwards through the namespace names of the fully-qualified
-		// class name to find a mapped file name
-		while (false !== $pos = strrpos($prefix, '\\')) {
-
-			// retain the trailing namespace separator in the prefix
-			$prefix = substr($class, 0, $pos + 1);
-
-			// the rest is the relative class name
-			$relative_class = substr($class, $pos + 1);
-
-			// try to load a mapped file for the prefix and relative class
-			$mapped_file = $this->loadMappedFile($prefix, $relative_class);
-			if ($mapped_file) {
-				return $mapped_file;
-			}
-
-			// remove the trailing namespace separator for the next iteration
-			// of strrpos()
-			$prefix = rtrim($prefix, '\\');
-		}
-
-		// never found a mapped file
-		return false;
-	}
-
-	/**
-	 * Load the mapped file for a namespace prefix and relative class.
-	 *
-	 * @param string $prefix The namespace prefix.
-	 * @param string $relative_class The relative class name.
-	 * @return mixed Boolean false if no mapped file can be loaded, or the
-	 * name of the mapped file that was loaded.
-	 */
-	protected function loadMappedFile($prefix, $relative_class)
-	{
-		// are there any base directories for this namespace prefix?
-		if (isset($this->prefixes[$prefix]) === false) {
-			return false;
-		}
-
-		// look through base directories for this namespace prefix
-		foreach ($this->prefixes[$prefix] as $base_dir) {
-
-			// replace the namespace prefix with the base directory,
-			// replace namespace separators with directory separators
-			// in the relative class name, append with .php
-			$file = $base_dir
-				. str_replace('\\', '/', $relative_class)
-				. '.php';
-
-			// if the mapped file exists, require it
-			if ($this->requireFile($file)) {
-				// yes, we're done
-				return $file;
-			}
-		}
-
-		// never found it
-		return false;
-	}
-
-	/**
-	 * If a file exists, require it from the file system.
-	 *
-	 * @param string $file The file to require.
-	 * @return bool True if the file exists, false if not.
-	 */
-	protected function requireFile($file)
-	{
-		if (config('env') !== 'dev' || file_exists($file)) {
-			require $file;
-			return true;
-		}
-		return false;
-	}
-}

system/exception.php

@@ -1,5 +1,12 @@
 <?php
-
+/**
+ * Exception handler
+ *
+ * @package   MyAAC
+ * @author    Slawkens <slawkens@gmail.com>
+ * @copyright 2023 MyAAC
+ * @link      https://my-aac.org
+ */
 require LIBS . 'SensitiveException.php';
 
 /**

system/functions.php

@@ -7,12 +7,11 @@
  * @copyright 2019 MyAAC
  * @link      https://my-aac.org
  */
+defined('MYAAC') or die('Direct access not allowed!');
 
 use PHPMailer\PHPMailer\PHPMailer;
 use Twig\Loader\ArrayLoader as Twig_ArrayLoader;
 
-defined('MYAAC') or die('Direct access not allowed!');
-
 function message($message, $type, $return)
 {
 	if(IS_CLI) {
@@ -125,14 +124,13 @@ function getHouseLink($name, $generate = true)
 
 function getGuildLink($name, $generate = true)
 {
-	global $db;
+	global $config;
 
-	if(is_numeric($name))
+	if(is_numeric($name)) {
-	{
+		$name = getGuildNameById($name);
-		$guild = $db->query(
+		if ($name === false) {
-			'SELECT `name` FROM `guilds` WHERE `id` = ' . (int)$name);
+			$name = 'Unknown';
-		if($guild->rowCount() > 0)
+		}
-			$name = $guild->fetchColumn();
 	}
 
 	$settings = Settings::getInstance();
@@ -792,16 +790,21 @@ function get_templates()
  * Generates list of installed plugins
  * @return array $plugins
  */
-function get_plugins()
+function get_plugins($disabled = false): array
 {
-	$ret = array();
+	$ret = [];
 
 	$path = PLUGINS;
-	foreach(scandir($path, 0) as $file) {
+	foreach(scandir($path, SCANDIR_SORT_ASCENDING) as $file) {
 		$file_ext = pathinfo($file, PATHINFO_EXTENSION);
 		$file_name = pathinfo($file, PATHINFO_FILENAME);
-		if ($file === '.' || $file === '..' || $file === 'disabled' || $file === 'example.json' || $file_ext !== 'json' || is_dir($path . $file))
+		if ($file === '.' || $file === '..' || $file === 'example.json' || $file_ext !== 'json' || is_dir($path . $file)) {
 			continue;
+		}
+
+		if (!$disabled && strpos($file, 'disabled.') !== false) {
+			continue;
+		}
 
 		$ret[] = str_replace('.json', '', $file_name);
 	}
@@ -1553,6 +1556,39 @@ function escapeHtml($html) {
 	return htmlentities($html, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
 }
 
+function getGuildNameById($id)
+{
+	global $db;
+
+	$guild = $db->query('SELECT `name` FROM `guilds` WHERE `id` = ' . (int)$id);
+
+	if($guild->rowCount() > 0) {
+		return $guild->fetchColumn();
+	}
+
+	return false;
+}
+
+function getGuildLogoById($id)
+{
+	global $db;
+
+	$logo = 'default.gif';
+
+	$query = $db->query('SELECT `logo_name` FROM `guilds` WHERE `id` = ' . (int)$id);
+	if ($query->rowCount() == 1) {
+
+		$query = $query->fetch(PDO::FETCH_ASSOC);
+		$guildLogo = $query['logo_name'];
+
+		if (!empty($guildLogo) && file_exists(GUILD_IMAGES_DIR . $guildLogo)) {
+			$logo = $guildLogo;
+		}
+	}
+
+	return BASE_URL . GUILD_IMAGES_DIR . $logo;
+}
+
 // validator functions
 require_once LIBS . 'validator.php';
 require_once SYSTEM . 'compat/base.php';

system/hooks.php

@@ -30,6 +30,7 @@ define('HOOK_CHARACTERS_AFTER_CHARACTERS', ++$i);
 define('HOOK_LOGIN', ++$i);
 define('HOOK_LOGIN_ATTEMPT', ++$i);
 define('HOOK_LOGOUT', ++$i);
+define('HOOK_ACCOUNT_CHANGE_PASSWORD_POST', ++$i);
 define('HOOK_ACCOUNT_CREATE_BEFORE_FORM', ++$i);
 define('HOOK_ACCOUNT_CREATE_BEFORE_BOXES', ++$i);
 define('HOOK_ACCOUNT_CREATE_BETWEEN_BOXES_1', ++$i);
@@ -65,9 +66,12 @@ define('HOOK_ADMIN_MENU', ++$i);
 define('HOOK_ADMIN_LOGIN_AFTER_ACCOUNT', ++$i);
 define('HOOK_ADMIN_LOGIN_AFTER_PASSWORD', ++$i);
 define('HOOK_ADMIN_LOGIN_AFTER_SIGN_IN', ++$i);
+define('HOOK_ADMIN_ACCOUNTS_SAVE_POST', ++$i);
 define('HOOK_EMAIL_CONFIRMED', ++$i);
+define('HOOK_GUILDS_AFTER_INVITED_CHARACTERS', ++$i);
+
 const HOOK_FIRST = HOOK_STARTUP;
-const HOOK_LAST = HOOK_EMAIL_CONFIRMED;
+define('HOOK_LAST', $i);
 
 require_once LIBS . 'plugins.php';
 class Hook

system/libs/CreateCharacter.php

@@ -251,10 +251,12 @@ class CreateCharacter
 			}
 		}
 
-		$loaded_items_to_copy = $db->query("SELECT * FROM player_items WHERE player_id = ".$char_to_copy->getId()."");
+		if ($db->hasTable('player_items') && $db->hasColumn('player_items', 'pid') && $db->hasColumn('player_items', 'sid') && $db->hasColumn('player_items', 'itemtype')) {
-		foreach($loaded_items_to_copy as $save_item) {
+			$loaded_items_to_copy = $db->query("SELECT * FROM player_items WHERE player_id = ".$char_to_copy->getId()."");
-			$blob = $db->quote($save_item['attributes']);
+			foreach($loaded_items_to_copy as $save_item) {
-			$db->query("INSERT INTO `player_items` (`player_id` ,`pid` ,`sid` ,`itemtype`, `count`, `attributes`) VALUES ('".$player->getId()."', '".$save_item['pid']."', '".$save_item['sid']."', '".$save_item['itemtype']."', '".$save_item['count']."', $blob);");
+				$blob = $db->quote($save_item['attributes']);
+				$db->query("INSERT INTO `player_items` (`player_id` ,`pid` ,`sid` ,`itemtype`, `count`, `attributes`) VALUES ('".$player->getId()."', '".$save_item['pid']."', '".$save_item['sid']."', '".$save_item['itemtype']."', '".$save_item['count']."', $blob);");
+			}
 		}
 
 		global $twig;

system/libs/cache.php

@@ -110,4 +110,21 @@ class Cache
 	 * @return bool
 	 */
 	public function enabled() {return false;}
+
+	public static function remember($key, $ttl, $callback)
+	{
+		$cache = self::getInstance();
+		if(!$cache->enabled()) {
+			return $callback();
+		}
+
+		$value = null;
+		if ($cache->fetch($key, $value)) {
+			return unserialize($value);
+		}
+
+		$value = $callback();
+		$cache->set($key, serialize($value),$ttl);
+		return $value;
+	}
 }

system/libs/creatures.php

@@ -82,6 +82,9 @@ class Creatures {
 			$armor = $monster->getArmor();
 			$defensev = $monster->getDefense();
 
+			//load look
+			$look = $monster->getLook();
+
 			//load monster flags
 			$flags = $monster->getFlags();
 			if(!isset($flags['summonable']))
@@ -147,6 +150,7 @@ class Creatures {
 						'armor' => $armor,
 						'race' => $race,
 						'loot' => json_encode($loot),
+						'look' => json_encode($look),
 						'summons' => json_encode($summons)
 					));
 

system/libs/plugins.php

@@ -10,7 +10,7 @@
  */
 defined('MYAAC') or die('Direct access not allowed!');
 
-function is_sub_dir($path = NULL, $parent_folder = SITE_PATH) {
+function is_sub_dir($path = NULL, $parent_folder = BASE) {
 
 	//Get directory path minus last folder
 	$dir = dirname($path);
@@ -41,35 +41,9 @@ function is_sub_dir($path = NULL, $parent_folder = SITE_PATH) {
 use Composer\Semver\Semver;
 
 class Plugins {
-	private static $warnings = array();
+	private static $warnings = [];
 	private static $error = null;
-	private static $plugin_json = array();
+	private static $plugin_json = [];
-	private static $plugins = [];
-
-	public static function load()
-	{
-		$cache = Cache::getInstance();
-		if ($cache->enabled()) {
-			$tmp = '';
-			if ($cache->fetch('plugins', $tmp)) {
-				self::$plugins = unserialize($tmp);
-				return;
-			}
-		}
-
-		foreach (get_plugins() as $filename) {
-			$plugin_json = self::getPluginJson($filename);
-			if (!$plugin_json) {
-				continue;
-			}
-
-			self::$plugins[$filename] = $plugin_json;
-		}
-
-		if ($cache->enabled()) {
-			$cache->set('hooks', serialize(self::$plugins), 600);
-		}
-	}
 
 	public static function getRoutes()
 	{
@@ -82,22 +56,8 @@ class Plugins {
 		}
 
 		$routes = [];
-		foreach(get_plugins() as $filename) {
+		foreach(self::getAllPluginsJson() as $plugin) {
-			$string = file_get_contents(PLUGINS . $filename . '.json');
+			$warningPreTitle = 'Plugin: ' . $plugin['name'] . ' - ';
-			$string = self::removeComments($string);
-			$plugin = json_decode($string, true);
-			self::$plugin_json = $plugin;
-			if ($plugin == null) {
-				self::$warnings[] = 'Cannot load ' . $filename . '.json. File might be not a valid json code.';
-				continue;
-			}
-
-			if(isset($plugin['enabled']) && !getBoolean($plugin['enabled'])) {
-				self::$warnings[] = 'Skipping ' . $filename . '... The plugin is disabled.';
-				continue;
-			}
-
-			$warningPreTitle = 'Plugin: ' . $filename . ' - ';
 
 			if (isset($plugin['routes'])) {
 				foreach ($plugin['routes'] as $_name => $info) {
@@ -106,7 +66,8 @@ class Plugins {
 					if ($method !== '*') {
 						$methods = is_string($method) ? explode(',', $info['method']) : $method;
 						foreach ($methods as $method) {
-							if (!in_array($method, ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'HEAD'])) {
+							$method = strtolower($method);
+							if (!in_array($method, ['get', 'post', 'put', 'patch', 'delete', 'head'])) {
 								self::$warnings[] = $warningPreTitle . 'Not allowed method ' . $method . '... Disabling this route...';
 							}
 						}
@@ -187,14 +148,14 @@ class Plugins {
 		}
 
 		$hooks = [];
-		foreach (self::$plugins as $filename => $plugin_json) {
+		foreach(self::getAllPluginsJson() as $plugin) {
-			if (isset($plugin_json['hooks'])) {
+			if (isset($plugin['hooks'])) {
-				foreach ($plugin_json['hooks'] as $_name => $info) {
+				foreach ($plugin['hooks'] as $_name => $info) {
 					if (defined('HOOK_'. $info['type'])) {
 						$hook = constant('HOOK_'. $info['type']);
 						$hooks[] = ['name' => $_name, 'type' => $hook, 'file' => $info['file']];
 					} else {
-						self::$warnings[] = 'Plugin: ' . $filename . '. Unknown event type: ' . $info['type'];
+						self::$warnings[] = 'Plugin: ' . $plugin['name'] . '. Unknown event type: ' . $info['type'];
 					}
 				}
 			}
@@ -207,6 +168,41 @@ class Plugins {
 		return $hooks;
 	}
 
+	public static function getAllPluginsJson($disabled = false)
+	{
+		$cache = Cache::getInstance();
+		if ($cache->enabled()) {
+			$tmp = '';
+			if ($cache->fetch('plugins', $tmp)) {
+				return unserialize($tmp);
+			}
+		}
+
+		$plugins = [];
+		foreach (get_plugins($disabled) as $filename) {
+			$string = file_get_contents(PLUGINS . $filename . '.json');
+			$plugin = json_decode($string, true);
+			self::$plugin_json = $plugin;
+			if ($plugin == null) {
+				self::$warnings[] = 'Cannot load ' . $filename . '.json. File might be not a valid json code.';
+				continue;
+			}
+
+			if (isset($plugin['enabled']) && !getBoolean($plugin['enabled'])) {
+				self::$warnings[] = 'Skipping ' . $filename . '... The plugin is disabled.';
+				continue;
+			}
+
+			$plugins[] = $plugin;
+		}
+
+		if ($cache->enabled()) {
+			$cache->set('plugins', serialize($plugins), 600);
+		}
+
+		return $plugins;
+	}
+
 	public static function getPluginSettings($pluginName)
 	{
 		$plugin_json = self::getPluginJson($pluginName);
@@ -234,7 +230,6 @@ class Plugins {
 		}
 
 		$string = file_get_contents($pathToPlugin);
-		$string = self::removeComments($string);
 		$plugin_json = json_decode($string, true);
 		if ($plugin_json == null) {
 			self::$warnings[] = 'Cannot load ' . $name . '.json. File might be not a valid json code.';
@@ -289,7 +284,6 @@ class Plugins {
 		}
 
 		$string = file_get_contents($file_name);
-		$string = self::removeComments($string);
 		$plugin_json = json_decode($string, true);
 		self::$plugin_json = $plugin_json;
 		if ($plugin_json == null) {
@@ -489,7 +483,35 @@ class Plugins {
 		return false;
 	}
 
-	public static function uninstall($plugin_name)
+	public static function enable($pluginFileName): bool
+	{
+		return self::enableDisable($pluginFileName, true);
+	}
+
+	public static function disable($pluginFileName): bool
+	{
+		return self::enableDisable($pluginFileName, false);
+	}
+
+	private static function enableDisable($pluginFileName, $enable): bool
+	{
+		$filenameJson = $pluginFileName . '.json';
+		$fileExist = is_file(PLUGINS . ($enable ? 'disabled.' : '') . $filenameJson);
+		if (!$fileExist) {
+			self::$error = 'Cannot ' . ($enable ? 'enable' : 'disable') . ' plugin: ' . $pluginFileName . '. File does not exist.';
+			return false;
+		}
+
+		$result = rename(PLUGINS . ($enable ? 'disabled.' : '') . $filenameJson, PLUGINS . ($enable ? '' : 'disabled.') . $filenameJson);
+		if (!$result) {
+			self::$error = 'Cannot ' . ($enable ? 'enable' : 'disable') . ' plugin: ' . $pluginFileName . '. Permission problem.';
+			return false;
+		}
+
+		return true;
+	}
+
+	public static function uninstall($plugin_name): bool
 	{
 		$filename = BASE . 'plugins/' . $plugin_name . '.json';
 		if(!file_exists($filename)) {
@@ -497,9 +519,8 @@ class Plugins {
 			return false;
 		}
 		$string = file_get_contents($filename);
-		$string = self::removeComments($string);
 		$plugin_info = json_decode($string, true);
-		if($plugin_info == false) {
+		if(!$plugin_info) {
 			self::$error = 'Cannot load plugin info ' . $plugin_name . '.json';
 			return false;
 		}
@@ -577,20 +598,8 @@ class Plugins {
 		return self::$error;
 	}
 
-	public static function removeComments($string) {
+	public static function getPluginJson() {
-		$string = preg_replace('!/\*.*?\*/!s', '', $string);
+		return self::$plugin_json;
-		$string = preg_replace('/\n\s*\n/', "\n", $string);
-		//  Removes multi-line comments and does not create
-		//  a blank line, also treats white spaces/tabs
-		$string = preg_replace('!^[ \t]*/\*.*?\*/[ \t]*[\r\n]!s', '', $string);
-
-		//  Removes single line '//' comments, treats blank characters
-		$string = preg_replace('![ \t]*//.*[ \t]*[\r\n]!', '', $string);
-
-		//  Strip blank lines
-		$string = preg_replace("/(^[\r\n]*|[\r\n]+)[\s\t]*[\r\n]+/", "\n", $string);
-
-		return $string;
 	}
 
 	/**

system/libs/pot/OTS_Account.php

@@ -21,7 +21,6 @@
  * @property string $password Password.
  * @property string $eMail Email address.
  * @property int $premiumEnd Timestamp of PACC end.
- * @property bool $blocked Blocked flag state.
  * @property bool $deleted Deleted flag state.
  * @property bool $warned Warned flag state.
  * @property bool $banned Ban state.
@@ -39,7 +38,7 @@ class OTS_Account extends OTS_Row_DAO implements IteratorAggregate, Countable
  * @var array
  * @version 0.1.5
  */
-    private $data = array('email' => '', 'blocked' => false, 'rlname' => '','location' => '', 'country' => '','web_flags' => 0, 'lastday' => 0, 'premdays' => 0, 'created' => 0);
+    private $data = array('email' => '', 'rlname' => '','location' => '', 'country' => '','web_flags' => 0, 'lastday' => 0, 'premdays' => 0, 'created' => 0);
 
 	public static $cache = array();
 
@@ -231,26 +230,22 @@ class OTS_Account extends OTS_Row_DAO implements IteratorAggregate, Countable
  * @param int $id Account number.
  * @throws PDOException On PDO operation error.
  */
-    public function load($id, $fresh = false, $searchOnlyById = false)
+    public function load($id, $fresh = false)
     {
 		if(!$fresh && isset(self::$cache[$id])) {
 			$this->data = self::$cache[$id];
 			return;
 		}
 
-		$numberColumn = 'id';
 		$nameOrNumber = '';
-		if (!$searchOnlyById) {
+		if (USE_ACCOUNT_NAME) {
-			if (USE_ACCOUNT_NAME) {
+			$nameOrNumber = '`name`,';
-				$nameOrNumber = '`name`,';
+		} else if (USE_ACCOUNT_NUMBER) {
-			} else if (USE_ACCOUNT_NUMBER) {
+			$nameOrNumber = '`number`,';
-				$nameOrNumber = '`number`,';
-				$numberColumn = 'number';
-			}
 		}
 
         // SELECT query on database
-		$this->data = $this->db->query('SELECT `id`, ' . $nameOrNumber . '`password`, `email`, `blocked`, `rlname`, `location`, `country`, `web_flags`, ' . ($this->db->hasColumn('accounts', 'premdays') ? '`premdays`, ' : '') . ($this->db->hasColumn('accounts', 'lastday') ? '`lastday`, ' : ($this->db->hasColumn('accounts', 'premend') ? '`premend`,' : ($this->db->hasColumn('accounts', 'premium_ends_at') ? '`premium_ends_at`,' : ''))) . '`created` FROM `accounts` WHERE `' . $numberColumn . '` = ' . (int) $id)->fetch();
+		$this->data = $this->db->query('SELECT `id`, ' . $nameOrNumber . '`password`, `email`, `rlname`, `location`, `country`, `web_flags`, ' . ($this->db->hasColumn('accounts', 'premdays') ? '`premdays`, ' : '') . ($this->db->hasColumn('accounts', 'lastday') ? '`lastday`, ' : ($this->db->hasColumn('accounts', 'premend') ? '`premend`,' : ($this->db->hasColumn('accounts', 'premium_ends_at') ? '`premium_ends_at`,' : ''))) . '`created` FROM `accounts` WHERE `id` = ' . (int) $id)->fetch();
 		self::$cache[$id] = $this->data;
     }
 
@@ -268,8 +263,13 @@ class OTS_Account extends OTS_Row_DAO implements IteratorAggregate, Countable
  */
     public function find($name)
     {
+		$nameOrNumberColumn = 'name';
+		if (USE_ACCOUNT_NUMBER) {
+			$nameOrNumberColumn = 'number';
+		}
+
         // finds player's ID
-        $id = $this->db->query('SELECT `id` FROM `accounts` WHERE `name` = ' . $this->db->quote($name) )->fetch();
+        $id = $this->db->query('SELECT `id` FROM `accounts` WHERE `' . $nameOrNumberColumn . '` = ' . $this->db->quote($name) )->fetch();
 
         // if anything was found
         if( isset($id['id']) )
@@ -345,7 +345,7 @@ class OTS_Account extends OTS_Row_DAO implements IteratorAggregate, Countable
 	}
 
         // UPDATE query on database
-        $this->db->exec('UPDATE `accounts` SET ' . ($this->db->hasColumn('accounts', 'name') ? '`name` = ' . $this->db->quote($this->data['name']) . ',' : '') . '`password` = ' . $this->db->quote($this->data['password']) . ', `email` = ' . $this->db->quote($this->data['email']) . ', `blocked` = ' . (int) $this->data['blocked'] . ', `rlname` = ' . $this->db->quote($this->data['rlname']) . ', `location` = ' . $this->db->quote($this->data['location']) . ', `country` = ' . $this->db->quote($this->data['country']) . ', `web_flags` = ' . (int) $this->data['web_flags'] . ', ' . ($this->db->hasColumn('accounts', 'premdays') ? '`premdays` = ' . (int) $this->data['premdays'] . ',' : '') . '`' . $field . '` = ' . (int) $this->data[$field] . ' WHERE `id` = ' . $this->data['id']);
+        $this->db->exec('UPDATE `accounts` SET ' . ($this->db->hasColumn('accounts', 'name') ? '`name` = ' . $this->db->quote($this->data['name']) . ',' : '') . '`password` = ' . $this->db->quote($this->data['password']) . ', `email` = ' . $this->db->quote($this->data['email']) . ', `rlname` = ' . $this->db->quote($this->data['rlname']) . ', `location` = ' . $this->db->quote($this->data['location']) . ', `country` = ' . $this->db->quote($this->data['country']) . ', `web_flags` = ' . (int) $this->data['web_flags'] . ', ' . ($this->db->hasColumn('accounts', 'premdays') ? '`premdays` = ' . (int) $this->data['premdays'] . ',' : '') . '`' . $field . '` = ' . (int) $this->data[$field] . ' WHERE `id` = ' . $this->data['id']);
     }
 
 /**
@@ -650,53 +650,6 @@ class OTS_Account extends OTS_Row_DAO implements IteratorAggregate, Countable
         $this->data['email'] = (string) $email;
     }
 
-/**
- * Checks if account is blocked.
- *
- * <p>
- * Note: Since 0.0.3 version this method throws {@link E_OTS_NotLoaded E_OTS_NotLoaded} exception instead of triggering E_USER_WARNING.
- * </p>
- *
- * @version 0.0.3
- * @return bool Blocked state.
- * @throws E_OTS_NotLoaded If account is not loaded.
- */
-    public function isBlocked()
-    {
-        if( !isset($this->data['blocked']) )
-        {
-            throw new E_OTS_NotLoaded();
-        }
-
-        return $this->data['blocked'];
-    }
-
-/**
- * Unblocks account.
- *
- * <p>
- * This method only updates object state. To save changes in database you need to use {@link OTS_Account::save() save() method} to flush changed to database.
- * </p>
- */
-    public function unblock()
-    {
-        $this->data['blocked'] = false;
-    }
-
-/**
- * Blocks account.
- *
- * <p>
- * This method only updates object state. To save changes in databaseed to use {@link OTS_Account::save() save() method} to flush changed to database.
- * </p>
- */
-    public function block()
-    {
-        $this->data['blocked'] = true;
-    }
-
-
-
 /**
  * Reads custom field.
  *
@@ -1147,9 +1100,6 @@ class OTS_Account extends OTS_Row_DAO implements IteratorAggregate, Countable
             case 'playersList':
                 return $this->getPlayersList();
 
-            case 'blocked':
-                return $this->isBlocked();
-
             case 'deleted':
                 return $this->isDeleted();
 
@@ -1195,17 +1145,6 @@ class OTS_Account extends OTS_Row_DAO implements IteratorAggregate, Countable
                 $this->setPremiumEnd($value);
                 break;
 
-            case 'blocked':
-                if($value)
-                {
-                    $this->block();
-                }
-                else
-                {
-                    $this->unblock();
-                }
-                break;
-
             case 'deleted':
                 if($value)
                 {

system/libs/pot/OTS_Monster.php

@@ -36,6 +36,7 @@
  * @property-read int $armor Armor rate.
  * @property-read array $defenses List of defenses.
  * @property-read array $attacks List of attacks.
+ * @property-read array $look List of looks.
  */
 class OTS_Monster extends DOMDocument
 {
@@ -273,6 +274,30 @@ class OTS_Monster extends DOMDocument
         return $loot;
     }
 
+/**
+ * Returns look of the monster.
+ * 
+ * @return array Look with all the attributes of the look.
+ * @throws DOMException On DOM operation error.
+ */
+    public function getLook()
+    {
+        $look = array();
+
+        $element = $this->documentElement->getElementsByTagName('look')->item(0);
+
+        $look['type'] = $element->getAttribute('type');
+        $look['typeex'] = $element->getAttribute('typeex');
+        $look['head'] = $element->getAttribute('head');
+        $look['body'] = $element->getAttribute('body');
+        $look['legs'] = $element->getAttribute('legs');
+        $look['feet'] = $element->getAttribute('feet');
+        $look['addons'] = $element->getAttribute('addons');
+        $look['corpse'] = $element->getAttribute('corpse');
+
+        return $look;
+    }
+
 /**
  * Returns all monster summons.
  *
@@ -560,6 +585,9 @@ class OTS_Monster extends DOMDocument
             case 'attacks':
                 return $this->getAttacks();
 
+            case 'look':
+                return $this->getLook();
+
             default:
                 throw new OutOfBoundsException();
         }

system/libs/pot/OTS_MonstersList.php

@@ -174,6 +174,7 @@ class OTS_MonstersList implements Iterator, Countable, ArrayAccess
  * @return OTS_Monster Monster.
  * @throws DOMException On DOM operation error.
  */
+	#[\ReturnTypeWillChange]
     public function current()
     {
         return $this->getMonster( key($this->monsters) );
@@ -187,7 +188,7 @@ class OTS_MonstersList implements Iterator, Countable, ArrayAccess
 /**
  * Moves to next iterator monster.
  */
-    public function next()
+    public function next(): void
     {
         next($this->monsters);
     }
@@ -197,6 +198,7 @@ class OTS_MonstersList implements Iterator, Countable, ArrayAccess
  *
  * @return string Current position key.
  */
+	#[\ReturnTypeWillChange]
     public function key()
     {
         return key($this->monsters);
@@ -207,7 +209,7 @@ class OTS_MonstersList implements Iterator, Countable, ArrayAccess
  *
  * @return bool If iterator has anything more.
  */
-    public function valid()
+    public function valid(): bool
     {
         return key($this->monsters) !== null;
     }
@@ -215,7 +217,7 @@ class OTS_MonstersList implements Iterator, Countable, ArrayAccess
 /**
  * Resets iterator index.
  */
-    public function rewind()
+    public function rewind(): void
     {
         reset($this->monsters);
     }
@@ -226,6 +228,7 @@ class OTS_MonstersList implements Iterator, Countable, ArrayAccess
  * @param string $offset Array key.
  * @return bool True if it's set.
  */
+	#[\ReturnTypeWillChange]
     public function offsetExists($offset)
     {
         return isset($this->monsters[$offset]);
@@ -239,6 +242,7 @@ class OTS_MonstersList implements Iterator, Countable, ArrayAccess
  * @return OTS_Monster Monster instance.
  * @throws DOMException On DOM operation error.
  */
+	#[\ReturnTypeWillChange]
     public function offsetGet($offset)
     {
         return $this->getMonster($offset);
@@ -251,6 +255,7 @@ class OTS_MonstersList implements Iterator, Countable, ArrayAccess
  * @param mixed $value Field value.
  * @throws E_OTS_ReadOnly Always - this class is read-only.
  */
+	#[\ReturnTypeWillChange]
     public function offsetSet($offset, $value)
     {
         throw new E_OTS_ReadOnly();
@@ -262,6 +267,7 @@ class OTS_MonstersList implements Iterator, Countable, ArrayAccess
  * @param string|int $offset Array key.
  * @throws E_OTS_ReadOnly Always - this class is read-only.
  */
+	#[\ReturnTypeWillChange]
     public function offsetUnset($offset)
     {
         throw new E_OTS_ReadOnly();

system/libs/pot/OTS_Player.php

@@ -398,7 +398,7 @@ class OTS_Player extends OTS_Row_DAO
 			}
 
             // UPDATE query on database
-            $this->db->query('UPDATE ' . $this->db->tableName('players') . ' SET ' . $this->db->fieldName('name') . ' = ' . $this->db->quote($this->data['name']) . ', ' . $this->db->fieldName('account_id') . ' = ' . $this->data['account_id'] . ', ' . $this->db->fieldName('group_id') . ' = ' . $this->data['group_id'] . ', ' . $this->db->fieldName('sex') . ' = ' . $this->data['sex'] . ', ' . $this->db->fieldName('vocation') . ' = ' . $this->data['vocation'] . ', ' . $this->db->fieldName('experience') . ' = ' . $this->data['experience'] . ', ' . $this->db->fieldName('level') . ' = ' . $this->data['level'] . ', ' . $this->db->fieldName('maglevel') . ' = ' . $this->data['maglevel'] . ', ' . $this->db->fieldName('health') . ' = ' . $this->data['health'] . ', ' . $this->db->fieldName('healthmax') . ' = ' . $this->data['healthmax'] . ', ' . $this->db->fieldName('mana') . ' = ' . $this->data['mana'] . ', ' . $this->db->fieldName('manamax') . ' = ' . $this->data['manamax'] . ', ' . $this->db->fieldName('manaspent') . ' = ' . $this->data['manaspent'] . ', ' . $this->db->fieldName('soul') . ' = ' . $this->data['soul'] . ', ' . $this->db->fieldName('lookbody') . ' = ' . $this->data['lookbody'] . ', ' . $this->db->fieldName('lookfeet') . ' = ' . $this->data['lookfeet'] . ', ' . $this->db->fieldName('lookhead') . ' = ' . $this->data['lookhead'] . ', ' . $this->db->fieldName('looklegs') . ' = ' . $this->data['looklegs'] . ', ' . $this->db->fieldName('looktype') . ' = ' . $this->data['looktype'] . $lookaddons . ', ' . $this->db->fieldName('posx') . ' = ' . $this->data['posx'] . ', ' . $this->db->fieldName('posy') . ' = ' . $this->data['posy'] . ', ' . $this->db->fieldName('posz') . ' = ' . $this->data['posz'] . ', ' . $this->db->fieldName('cap') . ' = ' . $this->data['cap'] . ', ' . $this->db->fieldName('lastlogin') . ' = ' . $this->data['lastlogin'] . ', ' . $this->db->fieldName('lastlogout') . ' = ' . $this->data['lastlogout'] . ', ' . $this->db->fieldName('lastip') . ' = ' . $this->data['lastip'] . ', ' . $this->db->fieldName('save') . ' = ' . (int) $this->data['save'] . ', ' . $this->db->fieldName('conditions') . ' = ' . $this->db->quote($this->data['conditions']) . ', `' . $skull_time . '` = ' . $this->data['skulltime'] . ', `' . $skull_type . '` = ' . (int) $this->data['skull'] . $guild_info . ', ' . $this->db->fieldName('town_id') . ' = ' . $this->data['town_id'] . $loss . $loss_items . ', ' . $this->db->fieldName('balance') . ' = ' . $this->data['balance'] . $blessings . $stamina . $direction . ' WHERE ' . $this->db->fieldName('id') . ' = ' . $this->data['id']);
+            $this->db->query('UPDATE ' . $this->db->tableName('players') . ' SET ' . $this->db->fieldName('name') . ' = ' . $this->db->quote($this->data['name']) . ', ' . $this->db->fieldName('account_id') . ' = ' . $this->data['account_id'] . ', ' . $this->db->fieldName('group_id') . ' = ' . $this->data['group_id'] . ', ' . $this->db->fieldName('sex') . ' = ' . $this->data['sex'] . ', ' . $this->db->fieldName('vocation') . ' = ' . $this->data['vocation'] . ', ' . $this->db->fieldName('experience') . ' = ' . $this->data['experience'] . ', ' . $this->db->fieldName('level') . ' = ' . $this->data['level'] . ', ' . $this->db->fieldName('maglevel') . ' = ' . $this->data['maglevel'] . ', ' . $this->db->fieldName('health') . ' = ' . $this->data['health'] . ', ' . $this->db->fieldName('healthmax') . ' = ' . $this->data['healthmax'] . ', ' . $this->db->fieldName('mana') . ' = ' . $this->data['mana'] . ', ' . $this->db->fieldName('manamax') . ' = ' . $this->data['manamax'] . ', ' . $this->db->fieldName('manaspent') . ' = ' . $this->data['manaspent'] . ', ' . $this->db->fieldName('soul') . ' = ' . $this->data['soul'] . ', ' . $this->db->fieldName('lookbody') . ' = ' . $this->data['lookbody'] . ', ' . $this->db->fieldName('lookfeet') . ' = ' . $this->data['lookfeet'] . ', ' . $this->db->fieldName('lookhead') . ' = ' . $this->data['lookhead'] . ', ' . $this->db->fieldName('looklegs') . ' = ' . $this->data['looklegs'] . ', ' . $this->db->fieldName('looktype') . ' = ' . $this->data['looktype'] . $lookaddons . ', ' . $this->db->fieldName('posx') . ' = ' . $this->data['posx'] . ', ' . $this->db->fieldName('posy') . ' = ' . $this->data['posy'] . ', ' . $this->db->fieldName('posz') . ' = ' . $this->data['posz'] . ', ' . $this->db->fieldName('cap') . ' = ' . $this->data['cap'] . ', ' . $this->db->fieldName('lastlogin') . ' = ' . $this->data['lastlogin'] . ', ' . $this->db->fieldName('lastlogout') . ' = ' . $this->data['lastlogout'] . ', ' . $this->db->fieldName('lastip') . ' = ' . $this->db->quote($this->data['lastip']) . ', ' . $this->db->fieldName('save') . ' = ' . (int) $this->data['save'] . ', ' . $this->db->fieldName('conditions') . ' = ' . $this->db->quote($this->data['conditions']) . ', `' . $skull_time . '` = ' . $this->data['skulltime'] . ', `' . $skull_type . '` = ' . (int) $this->data['skull'] . $guild_info . ', ' . $this->db->fieldName('town_id') . ' = ' . $this->data['town_id'] . $loss . $loss_items . ', ' . $this->db->fieldName('balance') . ' = ' . $this->data['balance'] . $blessings . $stamina . $direction . ' WHERE ' . $this->db->fieldName('id') . ' = ' . $this->data['id']);
         }
         // creates new player
         else
@@ -602,7 +602,7 @@ class OTS_Player extends OTS_Row_DAO
         }
 
         $account = new OTS_Account();
-        $account->load($this->data['account_id'], false, true);
+        $account->load($this->data['account_id']);
         return $account;
     }
 

system/libs/pot/OTS_SpellsList.php

@@ -308,7 +308,7 @@ class OTS_SpellsList implements IteratorAggregate, Countable
  * @since 0.1.5
  * @return AppendIterator Iterator for all spells.
  */
-    public function getIterator()
+    public function getIterator(): Traversable
     {
         $iterator = new AppendIterator();
         $iterator->append( new ArrayIterator($this->runes) );

system/libs/visitors.php

@@ -34,10 +34,12 @@ class Visitors
 		$this->cleanVisitors();
 
 		$ip = $_SERVER['REMOTE_ADDR'];
+		$userAgentShortened = substr($_SERVER['HTTP_USER_AGENT'] ?? 'unknown', 0, 255);
+
 		if($this->visitorExists($ip))
-			$this->updateVisitor($ip, $_SERVER['REQUEST_URI']);
+			$this->updateVisitor($ip, $_SERVER['REQUEST_URI'], $userAgentShortened);
 		else
-			$this->addVisitor($ip, $_SERVER['REQUEST_URI']);
+			$this->addVisitor($ip, $_SERVER['REQUEST_URI'], $userAgentShortened);
 	}
 
 	public function __destruct()
@@ -75,26 +77,26 @@ class Visitors
 		$db->exec('DELETE FROM ' . $db->tableName(TABLE_PREFIX . 'visitors') . ' WHERE ' . $db->fieldName('lastvisit') . ' < ' . (time() - $this->sessionTime * 60));
 	}
 
-	private function updateVisitor($ip, $page)
+	private function updateVisitor($ip, $page, $userAgent)
 	{
 		if($this->cacheEnabled) {
-			$this->data[$ip] = array('page' => $page, 'lastvisit' => time());
+			$this->data[$ip] = array('page' => $page, 'lastvisit' => time(), 'user_agent' => $userAgent);
 			return;
 		}
 
 		global $db;
-		$db->exec('UPDATE ' . $db->tableName(TABLE_PREFIX . 'visitors') . ' SET ' . $db->fieldName('lastvisit') . ' = ' . time() . ', ' . $db->fieldName('page') . ' = ' . $db->quote($page) . ' WHERE ' . $db->fieldName('ip') . ' = ' . $db->quote($ip));
+		$db->update(TABLE_PREFIX . 'visitors', ['lastvisit' => time(), 'page' => $page, 'user_agent' => $userAgent], ['ip' => $ip]);
 	}
 
-	private function addVisitor($ip, $page)
+	private function addVisitor($ip, $page, $userAgent)
 	{
 		if($this->cacheEnabled) {
-			$this->data[$ip] = array('page' => $page, 'lastvisit' => time());
+			$this->data[$ip] = array('page' => $page, 'lastvisit' => time(), 'user_agent' => $userAgent);
 			return;
 		}
 
 		global $db;
-		$db->exec('INSERT INTO ' . $db->tableName(TABLE_PREFIX . 'visitors') . ' (' . $db->fieldName('ip') . ' ,' . $db->fieldName('lastvisit') . ', ' . $db->fieldName('page') . ') VALUE (' . $db->quote($ip) . ', ' . time() . ', ' . $db->quote($page) . ')');
+		$db->insert(TABLE_PREFIX . 'visitors', ['ip' => $ip, 'lastvisit' => time(), 'page' => $page, 'user_agent' => $userAgent]);
 	}
 
 	public function getVisitors()
@@ -107,7 +109,7 @@ class Visitors
 		}
 
 		global $db;
-		return $db->query('SELECT ' . $db->fieldName('ip') . ', ' . $db->fieldName('lastvisit') . ', ' . $db->fieldName('page') . ' FROM ' . $db->tableName(TABLE_PREFIX . 'visitors') . ' ORDER BY ' . $db->fieldName('lastvisit') . ' DESC')->fetchAll();
+		return $db->query('SELECT ' . $db->fieldName('ip') . ', ' . $db->fieldName('lastvisit') . ', ' . $db->fieldName('page') . ', ' . $db->fieldName('user_agent') . ' FROM ' . $db->tableName(TABLE_PREFIX . 'visitors') . ' ORDER BY ' . $db->fieldName('lastvisit') . ' DESC')->fetchAll();
 	}
 
 	public function getAmountVisitors()

system/logout.php

@@ -1,4 +1,13 @@
 <?php
+/**
+ * Logout from account
+ *
+ * @package   MyAAC
+ * @author    Slawkens <slawkens@gmail.com>
+ * @copyright 2019 MyAAC
+ * @link      https://my-aac.org
+ */
+defined('MYAAC') or die('Direct access not allowed!');
 
 if(isset($account_logged) && $account_logged->isLoaded()) {
 	if($hooks->trigger(HOOK_LOGOUT, ['account_id' => $account_logged->getId()])) {

system/migrate.php

@@ -1,4 +1,13 @@
 <?php
+/**
+ * Database migrations
+ *
+ * @package   MyAAC
+ * @author    Slawkens <slawkens@gmail.com>
+ * @copyright 2019 MyAAC
+ * @link      https://my-aac.org
+ */
+defined('MYAAC') or die('Direct access not allowed!');
 
 // database migrations
 $tmp = '';

system/migrations/34.php

@@ -1,13 +1,4 @@
 <?php
+// add user_agent column into visitors
 
-if(!$db->hasTable(TABLE_PREFIX . 'settings')) {
+$db->exec('ALTER TABLE `' . TABLE_PREFIX . "visitors` ADD `user_agent` VARCHAR(255) NOT NULL DEFAULT '';");
-	$db->exec("CREATE TABLE `" . TABLE_PREFIX . "settings`
-	(
-		`id` int(11) NOT NULL AUTO_INCREMENT,
-		`plugin_name` VARCHAR(255) NOT NULL DEFAULT '',
-		`key` VARCHAR(255) NOT NULL DEFAULT '',
-		`value` TEXT NOT NULL,
-		PRIMARY KEY (`id`),
-		KEY `key` (`key`)
-	) ENGINE=InnoDB DEFAULT CHARACTER SET=utf8;");
-}

system/migrations/35.php

@@ -0,0 +1,3 @@
+<?php
+// add look column
+$db->exec('ALTER TABLE `' . TABLE_PREFIX . "monsters` ADD `look` VARCHAR(255) NOT NULL DEFAULT '' AFTER `health`;");

system/migrations/36.php

@@ -0,0 +1 @@
+<?php

system/pages/account/change_password.php

@@ -26,11 +26,11 @@ if(empty($new_password) && empty($new_password2) && empty($old_password)) {
 else
 {
 	if(empty($new_password) || empty($new_password2) || empty($old_password)){
-		$errors[] = "Please fill in form.";
+		$errors[] = 'Please fill in form.';
 	}
 	$password_strlen = strlen($new_password);
 	if($new_password != $new_password2) {
-		$errors[] = "The new passwords do not match!";
+		$errors[] = 'The new passwords do not match!';
 	}
 
 	if(empty($errors)) {
@@ -41,9 +41,12 @@ else
 		/** @var OTS_Account $account_logged */
 		$old_password = encrypt((USE_ACCOUNT_SALT ? $account_logged->getCustomField('salt') : '') . $old_password);
 		if($old_password != $account_logged->getPassword()) {
-			$errors[] = "Current password is incorrect!";
+			$errors[] = 'Current password is incorrect!';
 		}
+
+		$hooks->trigger(HOOK_ACCOUNT_CHANGE_PASSWORD_POST);
 	}
+
 	if(!empty($errors)){
 		//show errors
 		$twig->display('error_box.html.twig', array('errors' => $errors));
@@ -51,12 +54,10 @@ else
 		//show form
 		$twig->display('account.change_password.html.twig');
 	}
-	else
+	else {
-	{
 		$org_pass = $new_password;
 
-		if(USE_ACCOUNT_SALT)
+		if(USE_ACCOUNT_SALT) {
-		{
 			$salt = generateRandomString(10, false, true, true);
 			$new_password = $salt . $new_password;
 			$account_logged->setCustomField('salt', $salt);
@@ -68,17 +69,18 @@ else
 		$account_logged->logAction('Account password changed.');
 
 		$message = '';
-		if($config['mail_enabled'] && $config['send_mail_when_change_password'])
+		if($config['mail_enabled'] && $config['send_mail_when_change_password']) {
-		{
 			$mailBody = $twig->render('mail.password_changed.html.twig', array(
 				'new_password' => $org_pass,
 				'ip' => get_browser_real_ip(),
 			));
 
-			if(_mail($account_logged->getEMail(), $config['lua']['serverName']." - Changed password", $mailBody))
+			if(_mail($account_logged->getEMail(), $config['lua']['serverName']." - Changed password", $mailBody)) {
-				$message = '<br/><small>Your new password were send on email address <b>'.$account_logged->getEMail().'</b>.</small>';
+				$message = '<br/><small>Your new password were send on email address <b>' . $account_logged->getEMail() . '</b>.</small>';
-			else
+			}
+			else {
 				$message = '<br/><p class="error">An error occurred while sending email. For Admin: More info can be found in system/logs/mailer-error.log</p>';
+			}
 		}
 
 		$twig->display('success.html.twig', array(

system/pages/account/create.php

@@ -26,8 +26,13 @@ if(config('account_create_character_create')) {
 }
 
 $account_type = 'number';
-if(USE_ACCOUNT_NAME) {
+if (config('account_login_by_email')) {
-	$account_type = 'name';
+	$account_type = 'Email Address';
+}
+else {
+	if(USE_ACCOUNT_NAME) {
+		$account_type = 'name';
+	}
 }
 
 $errors = array();
@@ -156,9 +161,12 @@ if($save)
 
 	if(empty($errors))
 	{
+		$hasBeenCreatedByEMail = false;
+
 		$new_account = new OTS_Account();
 		if (config('account_login_by_email')) {
 			$new_account->createWithEmail($email);
+			$hasBeenCreatedByEMail = true;
 		}
 		else {
 			if(USE_ACCOUNT_NAME)
@@ -175,7 +183,6 @@ if($save)
 
 		$new_account->setPassword(encrypt($password));
 		$new_account->setEMail($email);
-		$new_account->unblock();
 		$new_account->save();
 
 		if(USE_ACCOUNT_SALT)
@@ -247,14 +254,21 @@ if($save)
 				$character_created = $createCharacter->doCreate($character_name, $character_sex, $character_vocation, $character_town, $new_account, $errors);
 				if (!$character_created) {
 					error('There was an error creating your character. Please create your character later in account management page.');
+					error(implode(' ', $errors));
 				}
 			}
 
-			if($config['account_create_auto_login']) {
+			if(config('account_create_auto_login')) {
-				$_POST['account_login'] = USE_ACCOUNT_NAME ? $account_name : $account_id;
+				if ($hasBeenCreatedByEMail) {
+					$_POST['account_login'] = $email;
+				}
+				else {
+					$_POST['account_login'] = USE_ACCOUNT_NAME ? $account_name : $account_id;
+				}
+
 				$_POST['password_login'] = $password2;
 
-				require SYSTEM . 'login.php';
+				require PAGES . 'account/login.php';
 				header('Location: ' . getLink('account/manage'));
 			}
 

system/pages/account/login.php

@@ -1,4 +1,15 @@
 <?php
+/**
+ * Login
+ *
+ * @package   MyAAC
+ * @author    Gesior <jerzyskalski@wp.pl>
+ * @author    Slawkens <slawkens@gmail.com>
+ * @copyright 2023 MyAAC
+ * @link      https://my-aac.org
+ */
+defined('MYAAC') or die('Direct access not allowed!');
+$title = 'Login';
 
 // new login with data from form
 if(!$logged && isset($_POST['account_login'], $_POST['password_login']))
@@ -37,7 +48,7 @@ if(!$logged && isset($_POST['account_login'], $_POST['password_login']))
 		}
 
 		if (!config('account_login_by_email') || config('account_login_by_email_fallback')) {
-			if(USE_ACCOUNT_NAME) {
+			if(USE_ACCOUNT_NAME || USE_ACCOUNT_NUMBER) {
 				$account_logged->find($login_account);
 			} else {
 				$account_logged->load($login_account, true);
@@ -48,7 +59,7 @@ if(!$logged && isset($_POST['account_login'], $_POST['password_login']))
 			&& (!isset($t) || $t['attempts'] < 5)
 		)
 		{
-			setSession('account', $account_logged->getNumber());
+			setSession('account', $account_logged->getId());
 			setSession('password', encrypt((USE_ACCOUNT_SALT ? $account_logged->getCustomField('salt') : '') . $login_password));
 			if($remember_me) {
 				setSession('remember_me', true);

system/pages/account/lost.php

@@ -40,7 +40,7 @@ elseif($action == 'step1' && $action_type == 'email')
 		{
 			if($account->getCustomField('email_next') < time())
 				echo 'Please enter e-mail to account with this character.<BR>
-				<form action="?subtopic=lostaccount&action=sendcode" method=post>
+				<form action="' . getLink('account/lost') . '?action=sendcode" method=post>
 				<input type=hidden name="character">
 				<table cellspacing=1 cellpadding=4 border=0 width=100%>
 				<TR><TD BGCOLOR="'.$config['vdarkborder'].'" class="white"><B>Please enter e-mail to account</B></TD></TR>
@@ -68,7 +68,7 @@ elseif($action == 'step1' && $action_type == 'email')
 	else
 		echo 'Invalid player name format. If you have other characters on account try with other name.';
 	echo '<BR /><TABLE CELLSPACING=0 CELLPADDING=0 BORDER=0 WIDTH=100%><TR><TD><div style="text-align:center">
-				<a href="?subtopic=lostaccount" border="0"><IMG SRC="'.$template_path.'/images/global/buttons/sbutton_back.gif" NAME="Back" ALT="Back" BORDER=0 WIDTH=120 HEIGHT=18></a></div>
+				<a href="' . getLink('account/lost') . '" border="0"><IMG SRC="'.$template_path.'/images/global/buttons/sbutton_back.gif" NAME="Back" ALT="Back" BORDER=0 WIDTH=120 HEIGHT=18></a></div>
 				</TD></TR></FORM></TABLE></TABLE>';
 }
 elseif($action == 'sendcode')
@@ -95,8 +95,8 @@ elseif($action == 'sendcode')
 					<p>Account name: '.$account->getName().'</p>
 					<br />
 					To do so, please click this link:
-					<p><a href="' . BASE_URL . '?subtopic=lostaccount&action=checkcode&code='.$newcode.'&character='.urlencode($nick).'">'.BASE_URL.'/?subtopic=lostaccount&action=checkcode&code='.$newcode.'&character='.urlencode($nick).'</a></p>
+					<p><a href="' . getLink('account/lost') . '?action=checkcode&code='.$newcode.'&character='.urlencode($nick).'">'.BASE_URL.'/?subtopic=lostaccount&action=checkcode&code='.$newcode.'&character='.urlencode($nick).'</a></p>
-					<p>or open page: <i>' . BASE_URL . '?subtopic=lostaccount&action=checkcode</i> and in field "code" write <b>'.$newcode.'</b></p>
+					<p>or open page: <i>' . getLink('account/lost') . '?action=checkcode</i> and in field "code" write <b>'.$newcode.'</b></p>
 					<br/>
 						<p>If you did not request a password change, you may ignore this message and your password will remain unchanged.';
 
@@ -131,7 +131,7 @@ elseif($action == 'sendcode')
 	else
 		echo 'Invalid player name format. If you have other characters on account try with other name.';
 	echo '<BR /><TABLE CELLSPACING=0 CELLPADDING=0 BORDER=0 WIDTH=100%><TR><TD><div style="text-align:center">
-				<a href="?subtopic=lostaccount&action=step1&action_type=email&nick='.urlencode($nick).'" border="0"><IMG SRC="'.$template_path.'/images/global/buttons/sbutton_back.gif" NAME="Back" ALT="Back" BORDER=0 WIDTH=120 HEIGHT=18></a></div>
+				<a href="' . getLink('account/lost') . '?action=step1&action_type=email&nick='.urlencode($nick).'" border="0"><IMG SRC="'.$template_path.'/images/global/buttons/sbutton_back.gif" NAME="Back" ALT="Back" BORDER=0 WIDTH=120 HEIGHT=18></a></div>
 				</TD></TR></FORM></TABLE></TABLE>';
 }
 elseif($action == 'step1' && $action_type == 'reckey')
@@ -150,7 +150,7 @@ elseif($action == 'step1' && $action_type == 'reckey')
 			if(!empty($account_key))
 			{
 						echo 'If you enter right recovery key you will see form to set new e-mail and password to account. To this e-mail will be send your new password and account name.<BR>
-						<FORM ACTION="?subtopic=lostaccount&action=step2" METHOD=post>
+						<FORM ACTION="' . getLink('account/lost') . '?action=step2" METHOD=post>
 						<TABLE CELLSPACING=1 CELLPADDING=4 BORDER=0 WIDTH=100%>
 						<TR><TD BGCOLOR="'.$config['vdarkborder'].'" class="white"><B>Please enter your recovery key</B></TD></TR>
 						<TR><TD BGCOLOR="'.$config['darkborder'].'">

system/pages/account/manage.php

@@ -86,7 +86,7 @@ $twig->display('account.management.html.twig', array(
 	'email_request' => $email_request,
 	'email_new_time' => $email_new_time,
 	'email_new' => isset($email_new) ? $email_new : '',
-	'account' => USE_ACCOUNT_NAME ? $account_logged->getName() : $account_logged->getId(),
+	'account' => (USE_ACCOUNT_NAME ? $account_logged->getName() : (USE_ACCOUNT_NUMBER ? $account_logged->getNumber() : $account_logged->getId())),
 	'account_email' => $account_email,
 	'account_created' => $account_created,
 	'account_status' => $account_status,

system/pages/characters.php

@@ -201,8 +201,7 @@ if($player->isLoaded() && !$player->isDeleted())
 		unset($storage);
 	}
 
-	if($config['characters']['equipment']) {
+	if($config['characters']['equipment'] && $db->hasTable('player_items') && $db->hasColumn('player_items', 'pid') && $db->hasColumn('player_items', 'sid') && $db->hasColumn('player_items', 'itemtype')) {
-		global $db;
 		$eq_sql = $db->query('SELECT `pid`, `itemtype` FROM player_items WHERE player_id = '.$player->getId().' AND (`pid` >= 1 and `pid` <= 10)');
 		$equipment = array();
 		foreach($eq_sql as $eq)
@@ -285,7 +284,7 @@ WHERE killers.death_id = '".$death['id']."' ORDER BY killers.final_hit DESC, kil
 				$deaths[] = array('time' => $death['date'], 'description' => $description . '.');
 			}
 		}
-	} else {
+	} else if ($db->hasColumn('player_deaths', 'time') && $db->hasColumn('player_deaths', 'level') && $db->hasColumn('player_deaths', 'killed_by') && $db->hasColumn('player_deaths', 'is_player')) {
 		$mostdamage = '';
 		if($db->hasColumn('player_deaths', 'mostdamage_by'))
 			$mostdamage = ', `mostdamage_by`, `mostdamage_is_player`, `unjustified`, `mostdamage_unjustified`';

system/pages/gallery.php

@@ -101,14 +101,15 @@ if(isset($_GET['image']))
 	return;
 }
 
-$images =
+$images = Cache::remember('gallery_' . ($canEdit ? '1' : '0'), 60, function () use ($db, $canEdit) {
-	$db->query('SELECT `id`, `comment`, `image`, `author`, `thumb`' .
+	return $db->query('SELECT `id`, `comment`, `image`, `author`, `thumb`' .
 		($canEdit ? ', `hidden`, `ordering`' : '') .
 		' FROM `' . TABLE_PREFIX . 'gallery`' .
 		(!$canEdit ? ' WHERE `hidden` != 1' : '') .
-		' ORDER BY `ordering`;');
+		' ORDER BY `ordering`;')->fetchAll(PDO::FETCH_ASSOC);
+});
 
-$last = $images->rowCount();
+$last = count($images);
 if(!$last)
 {
 ?>

system/pages/guilds/list.php

@@ -19,23 +19,23 @@ $guilds_list->orderBy("name");
 $guilds = array();
 if(count($guilds_list) > 0)
 {
-    foreach ($guilds_list as $guild) {
+	foreach ($guilds_list as $guild) {
-        $guild_logo = $guild->getCustomField('logo_name');
+		$guild_logo = $guild->getCustomField('logo_name');
-        if (empty($guild_logo) || !file_exists(GUILD_IMAGES_DIR . $guild_logo))
+		if (empty($guild_logo) || !file_exists(GUILD_IMAGES_DIR . $guild_logo))
-            $guild_logo = "default.gif";
+			$guild_logo = "default.gif";
 
-        $description = $guild->getCustomField('description');
+		$description = $guild->getCustomField('description');
-        $description_with_lines = str_replace(array("\r\n", "\n", "\r"), '<br />', $description, $count);
+		$description_with_lines = str_replace(array("\r\n", "\n", "\r"), '<br />', $description, $count);
-        if ($count < $config['guild_description_lines_limit'])
+		if ($count < $config['guild_description_lines_limit'])
-            $description = wordwrap(nl2br($description), 60, "<br />", true);
+			$description = wordwrap(nl2br($description), 60, "<br />", true);
 
-        $guildName = $guild->getName();
+		$guildName = $guild->getName();
-        $guilds[] = array('name' => $guildName, 'logo' => $guild_logo, 'link' => getGuildLink($guildName, false), 'description' => $description);
+		$guilds[] = array('name' => $guildName, 'logo' => $guild_logo, 'link' => getGuildLink($guildName, false), 'description' => $description);
-    }
+	}
 };
 
 $twig->display('guilds.list.html.twig', array(
-    'guilds' => $guilds,
+	'guilds' => $guilds,
-    'logged' => isset($logged) ? $logged : false,
+	'logged' => isset($logged) ? $logged : false,
-    'isAdmin' => admin(),
+	'isAdmin' => admin(),
 ));

system/pages/guilds/show.php

@@ -49,78 +49,78 @@ $players_from_account_in_guild = array();
 $players_from_account_ids = array();
 if($logged)
 {
-    $account_players = $account_logged->getPlayers();
+	$account_players = $account_logged->getPlayers();
-    foreach($account_players as $player)
+	foreach($account_players as $player)
-    {
+	{
-        $players_from_account_ids[] = $player->getId();
+		$players_from_account_ids[] = $player->getId();
-        $player_rank = $player->getRank();
+		$player_rank = $player->getRank();
-        if($player_rank->isLoaded())
+		if($player_rank->isLoaded())
-        {
+		{
-            foreach($rank_list as $rank_in_guild)
+			foreach($rank_list as $rank_in_guild)
-            {
+			{
-                if($guild_owner->isLoaded() && $rank_in_guild->isLoaded() && $player_rank->isLoaded() &&
+				if($guild_owner->isLoaded() && $rank_in_guild->isLoaded() && $player_rank->isLoaded() &&
-                    $rank_in_guild->getId() == $player_rank->getId())
+					$rank_in_guild->getId() == $player_rank->getId())
-                {
+				{
-                    $players_from_account_in_guild[] = $player->getName();
+					$players_from_account_in_guild[] = $player->getName();
-                    if($guild_owner->getId() == $player->getId())
+					if($guild_owner->getId() == $player->getId())
-                    {
+					{
-                        $guild_vice = true;
+						$guild_vice = true;
-                        $guild_leader = true;
+						$guild_leader = true;
-                    }
+					}
-                    else if($player_rank->getLevel() > 1)
+					else if($player_rank->getLevel() > 1)
-                    {
+					{
-                        $guild_vice = true;
+						$guild_vice = true;
-                        $level_in_guild = $player_rank->getLevel();
+						$level_in_guild = $player_rank->getLevel();
-                    }
+					}
-                }
+				}
-            }
+			}
-        }
+		}
-    }
+	}
 }
 
 //show guild page
 $guild_logo = $guild->getCustomField('logo_name');
 if(empty($guild_logo) || !file_exists(GUILD_IMAGES_DIR . $guild_logo))
-    $guild_logo = "default.gif";
+	$guild_logo = "default.gif";
 
 $description = $guild->getCustomField('description');
 $description_with_lines = str_replace(array("\r\n", "\n", "\r"), '<br />', $description, $count);
 if($count < $config['guild_description_lines_limit'])
-    $description = wordwrap(nl2br($description), 60, "<br />", true);
+	$description = wordwrap(nl2br($description), 60, "<br />", true);
 //$description = $description_with_lines;
 
 $guild_owner = $guild->getOwner();
 if($guild_owner->isLoaded())
-    $guild_owner_name = $guild_owner->getName();
+	$guild_owner_name = $guild_owner->getName();
 
 $guild_members = array();
 foreach($rank_list as $rank)
 {
-    if($db->hasTable(GUILD_MEMBERS_TABLE))
+	if($db->hasTable(GUILD_MEMBERS_TABLE))
-        $players_with_rank = $db->query('SELECT `players`.`id` as `id`, `' . GUILD_MEMBERS_TABLE . '`.`rank_id` as `rank_id` FROM `players`, `' . GUILD_MEMBERS_TABLE . '` WHERE `' . GUILD_MEMBERS_TABLE . '`.`rank_id` = ' . $rank->getId() . ' AND `players`.`id` = `' . GUILD_MEMBERS_TABLE . '`.`player_id` ORDER BY `name`;');
+		$players_with_rank = $db->query('SELECT `players`.`id` as `id`, `' . GUILD_MEMBERS_TABLE . '`.`rank_id` as `rank_id` FROM `players`, `' . GUILD_MEMBERS_TABLE . '` WHERE `' . GUILD_MEMBERS_TABLE . '`.`rank_id` = ' . $rank->getId() . ' AND `players`.`id` = `' . GUILD_MEMBERS_TABLE . '`.`player_id` ORDER BY `name`;');
-    else if($db->hasColumn('players', 'rank_id'))
+	else if($db->hasColumn('players', 'rank_id'))
-        $players_with_rank = $db->query('SELECT `id`, `rank_id` FROM `players` WHERE `rank_id` = ' . $rank->getId() . ' AND `deleted` = 0;');
+		$players_with_rank = $db->query('SELECT `id`, `rank_id` FROM `players` WHERE `rank_id` = ' . $rank->getId() . ' AND `deleted` = 0;');
 
-    $players_with_rank_number = $players_with_rank->rowCount();
+	$players_with_rank_number = $players_with_rank->rowCount();
-    if($players_with_rank_number > 0)
+	if($players_with_rank_number > 0)
-    {
+	{
-        $members = array();
+		$members = array();
-        foreach($players_with_rank as $result)
+		foreach($players_with_rank as $result)
-        {
+		{
-            $player = new OTS_Player();
+			$player = new OTS_Player();
-            $player->load($result['id']);
+			$player->load($result['id']);
-            if(!$player->isLoaded())
+			if(!$player->isLoaded())
-                continue;
+				continue;
 
-            $members[] = $player;
+			$members[] = $player;
-        }
+		}
 
-        $guild_members[] = array(
+		$guild_members[] = array(
-            'rank_name' => $rank->getName(),
+			'rank_name' => $rank->getName(),
-            'rank_level' => $rank->getLevel(),
+			'rank_level' => $rank->getLevel(),
-            'members' => $members
+			'members' => $members
-        );
+		);
-    }
+	}
 }
 
 include(SYSTEM . 'libs/pot/InvitesDriver.php');
@@ -129,37 +129,39 @@ $invited_list = $guild->listInvites();
 $show_accept_invite = 0;
 if($logged && count($invited_list) > 0)
 {
-    foreach($invited_list as $invited_player)
+	foreach($invited_list as $invited_player)
-    {
+	{
-        if(count($account_players) > 0)
+		if(count($account_players) > 0)
-        {
+		{
-            foreach($account_players as $player_from_acc)
+			foreach($account_players as $player_from_acc)
-            {
+			{
-                if($player_from_acc->isLoaded() && $invited_player->isLoaded() && $player_from_acc->getName() == $invited_player->getName())
+				if($player_from_acc->isLoaded() && $invited_player->isLoaded() && $player_from_acc->getName() == $invited_player->getName())
-                    $show_accept_invite++;
+					$show_accept_invite++;
-            }
+			}
-        }
+		}
-    }
+	}
 }
 
 $useGuildNick = false;
 if($db->hasColumn('players', 'guildnick'))
-    $useGuildNick = true;
+	$useGuildNick = true;
 
 $twig->display('guilds.view.html.twig', array(
-    'logo' => $guild_logo,
+	'logo' => $guild_logo,
-    'guild_name' => $guild_name,
+	'guild' => $guild,
-    'description' => $description,
+	'guild_id' => $guild->getId(),
-    'guild_owner' => $guild_owner->isLoaded() ? $guild_owner : null,
+	'guild_name' => $guild_name,
-    'guild_creation_date' => $guild->getCreationData(),
+	'description' => $description,
-    'guild_members' => $guild_members,
+	'guild_owner' => $guild_owner->isLoaded() ? $guild_owner : null,
-    'players_from_account_ids' => $players_from_account_ids,
+	'guild_creation_date' => $guild->getCreationData(),
-    'players_from_account_in_guild' => $players_from_account_in_guild,
+	'guild_members' => $guild_members,
-    'level_in_guild' => $level_in_guild,
+	'players_from_account_ids' => $players_from_account_ids,
-    'isLeader' => $guild_leader,
+	'players_from_account_in_guild' => $players_from_account_in_guild,
-    'isVice' => $guild_vice,
+	'level_in_guild' => $level_in_guild,
-    'logged' => $logged,
+	'isLeader' => $guild_leader,
-    'invited_list' => $invited_list,
+	'isVice' => $guild_vice,
-    'show_accept_invite' => $show_accept_invite,
+	'logged' => $logged,
-    'useGuildNick' => $useGuildNick
+	'invited_list' => $invited_list,
+	'show_accept_invite' => $show_accept_invite,
+	'useGuildNick' => $useGuildNick
 ));

system/pages/houses.php

@@ -14,17 +14,17 @@ $title = 'Houses';
 
 $errors = array();
 if(!$db->hasColumn('houses', 'name')) {
-    $errors[] = 'Houses list is not available on this server.';
+	$errors[] = 'Houses list is not available on this server.';
 
-    $twig->display('houses.html.twig', array(
+	$twig->display('houses.html.twig', array(
-        'errors' => $errors
+		'errors' => $errors
-    ));
+	));
 	return;
 }
 
 $rentType = trim(strtolower($config['lua']['houseRentPeriod']));
 if($rentType != 'yearly' && $rentType != 'monthly' && $rentType != 'weekly' && $rentType != 'daily')
-    $rentType = 'never';
+	$rentType = 'never';
 
 $state = '';
 $order = '';
@@ -32,116 +32,116 @@ $type = '';
 
 if(isset($_GET['page']) && $_GET['page'] == 'view' && isset($_REQUEST['house']))
 {
-    $beds = array("", "one", "two", "three", "fourth", "fifth");
+	$beds = array("", "one", "two", "three", "fourth", "fifth");
-    $houseName = $_REQUEST['house'];
+	$houseName = $_REQUEST['house'];
-    $houseId = (Validator::number($_REQUEST['house']) ? $_REQUEST['house'] : -1);
+	$houseId = (Validator::number($_REQUEST['house']) ? $_REQUEST['house'] : -1);
-    $selectHouse = $db->query('SELECT * FROM ' . $db->tableName('houses') . ' WHERE ' . $db->fieldName('name') . ' LIKE ' . $db->quote($houseName) . ' OR `id` = ' . $db->quote($houseId));
+	$selectHouse = $db->query('SELECT * FROM ' . $db->tableName('houses') . ' WHERE ' . $db->fieldName('name') . ' LIKE ' . $db->quote($houseName) . ' OR `id` = ' . $db->quote($houseId));
 
-    $house = array();
+	$house = array();
-    if($selectHouse->rowCount() > 0)
+	if($selectHouse->rowCount() > 0)
-    {
+	{
-        $house = $selectHouse->fetch();
+		$house = $selectHouse->fetch();
-        $houseId = $house['id'];
+		$houseId = $house['id'];
 
-        $title = $house['name'] . ' - ' . $title;
+		$title = $house['name'] . ' - ' . $title;
 
-        $imgPath = 'images/houses/' . $houseId . '.gif';
+		$imgPath = 'images/houses/' . $houseId . '.gif';
-        if(!file_exists($imgPath)) {
+		if(!file_exists($imgPath)) {
-            $imgPath = 'images/houses/default.jpg';
+			$imgPath = 'images/houses/default.jpg';
-        }
+		}
 
-        $bedsMessage = null;
+		$bedsMessage = null;
-        $houseBeds = $house['beds'];
+		$houseBeds = $house['beds'];
-        if($houseBeds > 0)
+		if($houseBeds > 0)
-            $bedsMessage = 'House have ' . (isset($beds[$houseBeds]) ? $beds[$houseBeds] : $houseBeds) . ' bed' . ($houseBeds > 1 ? 's' : '');
+			$bedsMessage = 'House have ' . (isset($beds[$houseBeds]) ? $beds[$houseBeds] : $houseBeds) . ' bed' . ($houseBeds > 1 ? 's' : '');
-        else
+		else
-            $bedsMessage = 'This house dont have any beds';
+			$bedsMessage = 'This house dont have any beds';
 
-        $houseOwner = $house['owner'];
+		$houseOwner = $house['owner'];
-        if($houseOwner > 0)
+		if($houseOwner > 0)
-        {
+		{
-            $guild = NULL;
+			$guild = NULL;
-            $owner = null;
+			$owner = null;
-            if(isset($house['guild']) && $house['guild'] == 1)
+			if(isset($house['guild']) && $house['guild'] == 1)
-            {
+			{
-                $guild = new OTS_Guild();
+				$guild = new OTS_Guild();
-                $guild->load($houseOwner);
+				$guild->load($houseOwner);
-                $owner = getGuildLink($guild->getName());
+				$owner = getGuildLink($guild->getName());
-            }
+			}
-            else
+			else
-                $owner = getCreatureName($houseOwner);
+				$owner = getCreatureName($houseOwner);
 
-            if($rentType != 'never' && $house['paid'] > 0)
+			if($rentType != 'never' && $house['paid'] > 0)
-            {
+			{
-                $who = '';
+				$who = '';
-                if($guild)
+				if($guild)
-                    $who = $guild->getName();
+					$who = $guild->getName();
-                else
+				else
-                {
+				{
-                    $player = new OTS_Player();
+					$player = new OTS_Player();
-                    $player->load($houseOwner);
+					$player->load($houseOwner);
-                    if($player->isLoaded())
+					if($player->isLoaded())
-                    {
+					{
-                        $sexs = array('She', 'He');
+						$sexs = array('She', 'He');
-                        $who = $sexs[$player->getSex()];
+						$who = $sexs[$player->getSex()];
-                    }
+					}
-                }
+				}
-                $owner .= ' ' . $who . ' has paid the rent until ' . date("M d Y, H:i:s", $house['paid']) . ' CEST.';
+				$owner .= ' ' . $who . ' has paid the rent until ' . date("M d Y, H:i:s", $house['paid']) . ' CEST.';
-            }
+			}
-        }
+		}
-    }
+	}
-    else
+	else
-        $errors[] =  'House with name ' . $houseName . ' does not exists.';
+		$errors[] =  'House with name ' . $houseName . ' does not exists.';
 
-    $twig->display('houses.view.html.twig', array(
+	$twig->display('houses.view.html.twig', array(
-        'errors' => $errors,
+		'errors' => $errors,
-        'imgPath' => isset($imgPath) ? $imgPath : null,
+		'imgPath' => isset($imgPath) ? $imgPath : null,
-        'houseName' => isset($house['name']) ? $house['name'] : null,
+		'houseName' => isset($house['name']) ? $house['name'] : null,
-        'bedsMessage' => isset($bedsMessage) ? $bedsMessage : null,
+		'bedsMessage' => isset($bedsMessage) ? $bedsMessage : null,
-        'houseSize' => isset($house['size']) ? $house['size'] : null,
+		'houseSize' => isset($house['size']) ? $house['size'] : null,
-        'houseRent' => isset($house['rent']) ? $house['rent'] : null,
+		'houseRent' => isset($house['rent']) ? $house['rent'] : null,
-        'owner' => isset($owner) ? $owner : null,
+		'owner' => isset($owner) ? $owner : null,
-        'rentType' => isset($rentType) ? $rentType : null
+		'rentType' => isset($rentType) ? $rentType : null
-    ));
+	));
 
-    if (count($errors) > 0) {
+	if (count($errors) > 0) {
-        return;
+		return;
-    }
+	}
 }
 
 $cleanOldHouse = null;
 if(isset($config['lua']['houseCleanOld'])) {
-    $cleanOldHouse = (int)(eval('return ' . $config['lua']['houseCleanOld'] . ';') / (24 * 60 * 60));
+	$cleanOldHouse = (int)(eval('return ' . $config['lua']['houseCleanOld'] . ';') / (24 * 60 * 60));
 }
 
 $housesSearch = false;
 if(isset($_POST['town']) && isset($_POST['state']) && isset($_POST['order']) && (isset($_POST['type']) || !$db->hasColumn('houses', 'guild')))
 {
-    $townName = $config['towns'][$_POST['town']];
+	$townName = $config['towns'][$_POST['town']];
-    $order = $_POST['order'];
+	$order = $_POST['order'];
-    $orderby = '`name`';
+	$orderby = '`name`';
-    if(!empty($order))
+	if(!empty($order))
-    {
+	{
-        if($order == 'size')
+		if($order == 'size')
-            $orderby = '`size`';
+			$orderby = '`size`';
-        else if($order == 'rent')
+		else if($order == 'rent')
-            $orderby = '`rent`';
+			$orderby = '`rent`';
-    }
+	}
 
-    $town = 'town';
+	$town = 'town';
-    if($db->hasColumn('houses', 'town_id'))
+	if($db->hasColumn('houses', 'town_id'))
-        $town = 'town_id';
+		$town = 'town_id';
-    else if($db->hasColumn('houses', 'townid'))
+	else if($db->hasColumn('houses', 'townid'))
-        $town = 'townid';
+		$town = 'townid';
 
-    $whereby = '`' . $town . '` = ' .(int)$_POST['town'];
+	$whereby = '`' . $town . '` = ' .(int)$_POST['town'];
-    $state = $_POST['state'];
+	$state = $_POST['state'];
-    if(!empty($state))
+	if(!empty($state))
-        $whereby .= ' AND `owner` ' . ($state == 'free' ? '' : '!'). '= 0';
+		$whereby .= ' AND `owner` ' . ($state == 'free' ? '' : '!'). '= 0';
 
-    $type = isset($_POST['type']) ? $_POST['type'] : NULL;
+	$type = isset($_POST['type']) ? $_POST['type'] : NULL;
-    if($type == 'guildhalls' && !$db->hasColumn('houses', 'guild'))
+	if($type == 'guildhalls' && !$db->hasColumn('houses', 'guild'))
-        $type = 'all';
+		$type = 'all';
 
 	if (!empty($type) && $type != 'all')
 	{
@@ -158,49 +158,51 @@ if(isset($_POST['town']) && isset($_POST['state']) && isset($_POST['order']) &&
 		}
 	}
 
-    $houses_info = $db->query('SELECT * FROM `houses` WHERE ' . $whereby. ' ORDER BY ' . $orderby);
+	$houses_info = $db->query('SELECT * FROM `houses` WHERE ' . $whereby. ' ORDER BY ' . $orderby);
 
-    $players_info = $db->query("SELECT `houses`.`id` AS `houseid` , `players`.`name` AS `ownername` FROM `houses` , `players` , `accounts` WHERE `players`.`id` = `houses`.`owner` AND `accounts`.`id` = `players`.`account_id`");
+	$players_info = $db->query("SELECT `houses`.`id` AS `houseid` , `players`.`name` AS `ownername` FROM `houses` , `players` , `accounts` WHERE `players`.`id` = `houses`.`owner` AND `accounts`.`id` = `players`.`account_id`");
-    $players = array();
+	$players = array();
-    foreach($players_info->fetchAll() as $player)
+	foreach($players_info->fetchAll() as $player)
-        $players[$player['houseid']] = array('name' => $player['ownername']);
+		$players[$player['houseid']] = array('name' => $player['ownername']);
 
-    $houses = array();
+	$hasTilesColumn = $db->hasColumn('houses', 'tiles');
-    foreach($houses_info->fetchAll() as $house)
-    {
-        $owner = isset($players[$house['id']]) ? $players[$house['id']] : array();
 
-        $houseRent = null;
+	$houses = array();
-        if($db->hasColumn('houses', 'guild') && $house['guild'] == 1 && $house['owner'] != 0)
+	foreach($houses_info->fetchAll() as $house)
-        {
+	{
-            $guild = new OTS_Guild();
+		$owner = isset($players[$house['id']]) ? $players[$house['id']] : array();
-            $guild->load($house['owner']);
-            $houseRent = 'Rented by ' . getGuildLink($guild->getName());
-        }
-        else
-        {
-            if(!empty($owner['name']))
-                $houseRent = 'Rented by ' . getPlayerLink($owner['name']);
-            else
-                $houseRent = 'Free';
-        }
 
-        $houses[] = array('owner' => $owner, 'name' => $house['name'], 'size' => $house['size'], 'rent' => $house['rent'], 'rentedBy' => $houseRent);
+		$houseRent = null;
-    }
+		if($db->hasColumn('houses', 'guild') && $house['guild'] == 1 && $house['owner'] != 0)
+		{
+			$guild = new OTS_Guild();
+			$guild->load($house['owner']);
+			$houseRent = 'Rented by ' . getGuildLink($guild->getName());
+		}
+		else
+		{
+			if(!empty($owner['name']))
+				$houseRent = 'Rented by ' . getPlayerLink($owner['name']);
+			else
+				$houseRent = 'Free';
+		}
 
-    $housesSearch = true;
+		$houses[] = array('owner' => $owner, 'name' => $house['name'], 'size' => ($hasTilesColumn ? $house['tiles'] : $house['size']), 'rent' => $house['rent'], 'rentedBy' => $houseRent);
+	}
+
+	$housesSearch = true;
 }
 
 $guild = $db->hasColumn('houses', 'guild') ? ' or guildhall' : '';
 $twig->display('houses.html.twig', array(
-    'state' => $state,
+	'state' => $state,
-    'order' => $order,
+	'order' => $order,
-    'type' => $type,
+	'type' => $type,
-    'houseType' => $type == 'guildhalls' ? 'Guildhalls' : 'Houses and Flats',
+	'houseType' => $type == 'guildhalls' ? 'Guildhalls' : 'Houses and Flats',
-    'townName' => isset($townName) ? $townName : null,
+	'townName' => isset($townName) ? $townName : null,
-    'townId' => isset($_POST['town']) ? $_POST['town'] : null,
+	'townId' => isset($_POST['town']) ? $_POST['town'] : null,
-    'guild' => $guild,
+	'guild' => $guild,
-    'cleanOldHouse' => isset($cleanOld) ? $cleanOld : null,
+	'cleanOldHouse' => isset($cleanOld) ? $cleanOld : null,
-    'housesSearch' => $housesSearch,
+	'housesSearch' => $housesSearch,
-    'houses' => isset($houses) ? $houses : null
+	'houses' => isset($houses) ? $houses : null
 ));

system/router.php

@@ -4,9 +4,10 @@
  *
  * @package   MyAAC
  * @author    Slawkens <slawkens@gmail.com>
- * @copyright 2021 MyAAC
+ * @copyright 2023 MyAAC
  * @link      https://my-aac.org
  */
+defined('MYAAC') or die('Direct access not allowed!');
 
 if(!isset($content[0]))
 	$content = '';
@@ -55,10 +56,9 @@ if (BASE_DIR !== '') {
 
 define('URI', $uri);
 
-/** @var boolean $load_it */
 if(!$load_it) {
 	// ignore warnings in some functions/plugins
-	// page is not loaded anyways
+	// page is not loaded anyway
 	define('PAGE', '');
 
 	return;
@@ -115,10 +115,22 @@ $dispatcher = FastRoute\cachedDispatcher(function (FastRoute\RouteCollector $r)
 		if ($route[0] === '*') {
 			$route[0] = ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'HEAD'];
 		}
+		else {
+			if (is_string($route[0])) {
+				$route[0] = explode(',', $route[0]);
+			}
+
+			$toUpperCase = function(string $value): string {
+				return trim(strtoupper($value));
+			};
+
+			// convert to upper case, fast-route accepts only upper case
+			$route[0] = array_map($toUpperCase, $route[0]);
+		}
 
 		$aliases = [
 			[':int', ':string', ':alphanum'],
-			[':\d+', ':[A-Za-z0-9-_%+\']+}', ':[A-Za-z0-9]+'],
+			[':\d+', ':[A-Za-z0-9-_%+\' ]+', ':[A-Za-z0-9]+'],
 		];
 
 		// apply aliases
@@ -147,6 +159,10 @@ $found = true;
 // old support for pages like /?subtopic=accountmanagement
 $page = $_REQUEST['p'] ?? ($_REQUEST['subtopic'] ?? '');
 if(!empty($page) && preg_match('/^[A-z0-9\-]+$/', $page)) {
+	if (isset($_REQUEST['p'])) { // some plugins may require this
+		$_REQUEST['subtopic'] = $_REQUEST['p'];
+	}
+
 	if (config('backward_support')) {
 		require SYSTEM . 'compat/pages.php';
 	}
@@ -161,7 +177,6 @@ else {
 	switch ($routeInfo[0]) {
 		case FastRoute\Dispatcher::NOT_FOUND:
 			// ... 404 Not Found
-			//var_dump('not found');
 			/**
 			 * Fallback to load page from templates/ or system/pages/ directory
 			 */
@@ -282,7 +297,8 @@ function getDatabasePages() {
 	return $ret;
 }
 
-function loadPageFromFileSystem($page, &$found) {
+function loadPageFromFileSystem($page, &$found): string
+{
 	$file = SYSTEM . 'pages/' . $page . '.php';
 	if (!is_file($file)) {
 		// feature: convert camelCase to snake_case

system/routes.php

@@ -7,9 +7,10 @@
  * @copyright 2021 MyAAC
  * @link      https://my-aac.org
  */
+defined('MYAAC') or die('Direct access not allowed!');
 
 return [
-	['GET', '', '__redirect__/news'], // redirect empty URL to news
+	['GET', '', '__redirect__/' . (config('friendly_urls') ? '' : 'index.php/') . 'news'], // redirect empty URL to news
 	['GET', 'news/archive/{id:int}[/]', 'news/archive.php'],
 
 	// block access to some files
@@ -26,12 +27,12 @@ return [
 	[['GET', 'POST'], 'account/character/sex[/]', 'account/change_sex.php'],
 	[['GET', 'POST'], 'account/character/delete[/]', 'account/delete_character.php'],
 	[['GET', 'POST'], 'account/character/comment[/{name:[A-Za-z0-9-_%+\']+}]', 'account/change_comment.php'],
-	['GET', 'account/confirm_email/{hash:[A-Za-z0-9-_]+}[/]', 'account/confirm_email.php'],
+	['GET', 'account/confirm_email/{hash:alphanum}[/]', 'account/confirm_email.php'],
 
-	['GET', 'bans/{page:\d+}[/]', 'bans.php'],
+	['GET', 'bans/{page:int}[/]', 'bans.php'],
-	[['GET', 'POST'], 'characters[/{name:string]', 'characters.php'],
+	[['GET', 'POST'], 'characters[/{name:string}]', 'characters.php'],
 	['GET', 'changelog[/{page:int}]', 'changelog.php'],
-	['GET', 'creatures[/{name:string}]', 'creatures.php'],
+	[['GET', 'POST'], 'creatures[/{name:string}]', 'creatures.php'],
 
 	['GET', 'faq[/{action:string}]', 'faq.php'],
 

system/templates/account.back_button.html.twig

@@ -0,0 +1,6 @@
+{% if new_line is defined and new_line %}
+	<br/>
+{% endif %}
+<form action="{% if action is not defined %}{{ getLink('account/manage') }}{% else %}{{ action }}{% endif %}" method="post">
+	{{ include('buttons.back.html.twig') }}
+</form>

system/templates/account.management.html.twig

@@ -89,10 +89,12 @@
 		<a name="General+Information"></a>
 		<h2>General Information</h2>
 		<table width="100%">
+			{% if not config.account_login_by_email or config.account_login_by_email_fallback %}
 			<tr style="background-color: {{ config.lightborder }};" >
 				<td style="width: 90px;">Account {% if constant('USE_ACCOUNT_NAME') %}Name{% else %}Number{% endif %}:</td>
 				<td>{{ account }}</td>
 			</tr>
+			{% endif %}
 			<tr style="background-color: {{ config.darkborder }};" >
 				<td style="width: 90px;">Email Address:</td>
 				<td>{{ account_email ~ email_change }}

system/templates/admin.plugins.html.twig

@@ -6,6 +6,7 @@
 		<table class="table table-striped table-bordered table-responsive d-md-table" id="tb_plugins">
 			<thead>
 			<tr>
+				<th>Enabled</th>
 				<th>Name</th>
 				<th>Version</th>
 				<th>Author</th>
@@ -16,6 +17,17 @@
 			<tbody>
 			{% for plugin in plugins %}
 				<tr>
+					<td>
+						{% if plugin.enabled %}
+						<a href="?p=plugins&disable={{ plugin.file }}" class="btn btn-success" onclick="return confirm('Are you sure you want to disable plugin {{ plugin.name }}?');" title="Disable">
+							<i class="fas fa-check"></i> Enabled
+						</a>
+						{% else %}
+							<a href="?p=plugins&enable={{ plugin.file }}" class="btn btn-danger" onclick="return confirm('Are you sure you want to enable plugin {{ plugin.name }}?');" title="Enable">
+								<i class="fas fa-ban"></i> Disabled
+							</a>
+						{% endif %}
+					</td>
 					<td><b>{{ plugin.name }}</b><br>
 						<small>{{ plugin.description|raw }}</small>
 					</td>
@@ -26,10 +38,11 @@
 					<td>{{ plugin.file }}.json</td>
 					<td>
 						{% if plugin.uninstall %}
-							<a href="?p=plugins&uninstall={{ plugin.file }}" class="btn btn-danger btn-sm" onclick="return confirm('Are you sure?');" title="Uninstall">
+							<a href="?p=plugins&uninstall={{ plugin.file }}" class="btn btn-danger btn-sm" onclick="return confirm('Are you sure you want to uninstall {{ plugin.name }}?');" title="Uninstall">
 								<i class="fas fa-trash"></i>
 							</a>
-						{% endif %}</td>
+						{% endif %}
+					</td>
 				</tr>
 			{% endfor %}
 			</tbody>
@@ -39,6 +52,6 @@
 
 <script>
 	$(function () {
-		$('#tb_plugins').DataTable()
+		$('#tb_plugins').DataTable();
 	})
 </script>

system/templates/admin.visitors.html.twig

@@ -9,6 +9,7 @@
 				<th>IP</th>
 				<th>Last visit</th>
 				<th>Page</th>
+				<th>Browser</th>
 			</tr>
 			</thead>
 			<tbody>
@@ -17,6 +18,7 @@
 					<td>{{ visitor.ip }}</td>
 					<td>{{ visitor.lastvisit|date("H:i:s") }}</td>
 					<td><a href="{{ visitor.page }}">{{ visitor.page|slice(0, 50) }}</a></td>
+					<td>{{ visitor.browser|raw }}</td>
 				</tr>
 			{% endfor %}
 			</tbody>

system/templates/guilds.list.html.twig

@@ -1,162 +1,162 @@
 <div class="TableContainer">
-    <div class="CaptionContainer">
+	<div class="CaptionContainer">
-        <div class="CaptionInnerContainer">
+		<div class="CaptionInnerContainer">
-            <span class="CaptionEdgeLeftTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+			<span class="CaptionEdgeLeftTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-            <span class="CaptionEdgeRightTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+			<span class="CaptionEdgeRightTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-            <span class="CaptionBorderTop" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
+			<span class="CaptionBorderTop" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
-            <span class="CaptionVerticalLeft" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
+			<span class="CaptionVerticalLeft" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
-            <div class="Text">Active Guilds on {{ config.lua.serverName }}</div>
+			<div class="Text">Active Guilds on {{ config.lua.serverName }}</div>
-            <span class="CaptionVerticalRight" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
+			<span class="CaptionVerticalRight" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
-            <span class="CaptionBorderBottom" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
+			<span class="CaptionBorderBottom" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
-            <span class="CaptionEdgeLeftBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+			<span class="CaptionEdgeLeftBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-            <span class="CaptionEdgeRightBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+			<span class="CaptionEdgeRightBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-        </div>
+		</div>
-    </div>
+	</div>
 
-    <table class="Table3">
+	<table class="Table3">
-        <tbody>
+		<tbody>
-            <tr>
+			<tr>
-                <td>
+				<td>
-                    <div class="InnerTableContainer">
+					<div class="InnerTableContainer">
-                        <table style="width:100%;">
+						<table style="width:100%;">
-                            <tbody>
+							<tbody>
-                                <tr>
+								<tr>
-                                    <td>
+									<td>
-                                        <div class="TableShadowContainerRightTop">
+										<div class="TableShadowContainerRightTop">
-                                            <div class="TableShadowRightTop" style="background-image:url({{ template_path }}/images/content/table-shadow-rt.gif);"></div>
+											<div class="TableShadowRightTop" style="background-image:url({{ template_path }}/images/content/table-shadow-rt.gif);"></div>
-                                        </div>
+										</div>
-                                        <div class="TableContentAndRightShadow" style="background-image:url({{ template_path }}/images/content/table-shadow-rm.gif);">
+										<div class="TableContentAndRightShadow" style="background-image:url({{ template_path }}/images/content/table-shadow-rm.gif);">
-                                            <div class="TableContentContainer">
+											<div class="TableContentContainer">
-                                                <table class="TableContent" width="100%">
+												<table class="TableContent" width="100%">
-                                                    <tbody>
+													<tbody>
-                                                        {% if guilds|length > 0 %}
+														{% if guilds|length > 0 %}
-                                                        <tr bgcolor="{{ config.darkborder }}">
+														<tr bgcolor="{{ config.darkborder }}">
-                                                            <td width="64"><b>Logo</b></td>
+															<td width="64"><b>Logo</b></td>
-                                                            <td><b>Description</b></td>
+															<td><b>Description</b></td>
-                                                            <td width="12%"><b>&nbsp;</b></td>
+															<td width="12%"><b>&nbsp;</b></td>
-                                                        </tr>
+														</tr>
 
-                                                            {% set i = 0 %}
+															{% set i = 0 %}
-                                                            {% for guild in guilds %}
+															{% for guild in guilds %}
-                                                            {% set i = i + 1 %}
+															{% set i = i + 1 %}
-                                                            <tr bgcolor="{{ getStyle(i) }}">
+															<tr bgcolor="{{ getStyle(i) }}">
-                                                                <td>
+																<td>
-                                                                    <img src="{{ constant('GUILD_IMAGES_DIR') }}{{ guild.logo }}" width="64" height="64">
+																	<img src="{{ constant('GUILD_IMAGES_DIR') }}{{ guild.logo }}" width="64" height="64">
-                                                                </td>
+																</td>
 
-                                                                <td>
+																<td>
-                                                                    <span{% if guild.description is not empty %} valign="top"{% endif %}>
+																	<span{% if guild.description is not empty %} valign="top"{% endif %}>
-                                                                        <b>{{ guild.name }}</b>{% if isAdmin %}<a href="?subtopic=guilds&action=delete_by_admin&guild={{ guild.name }}"> - Delete this guild (for ADMIN only!)</a>{% endif %}
+																		<b>{{ guild.name }}</b>{% if isAdmin %}<a href="?subtopic=guilds&action=delete_by_admin&guild={{ guild.name }}"> - Delete this guild (for ADMIN only!)</a>{% endif %}
-                                                                    </span>
+																	</span>
 
-                                                                    {% if guild.description is not empty %}
+																	{% if guild.description is not empty %}
-                                                                    <br>
+																	<br>
-                                                                    <span>{{ guild.description }}</span>
+																	<span>{{ guild.description }}</span>
-                                                                    {% endif %}
+																	{% endif %}
-                                                                </td>
+																</td>
 
-                                                                <td>
+																<td>
-                                                                    <table border="0" cellspacing="0" cellpadding="0" width="100%">
+																	<table border="0" cellspacing="0" cellpadding="0" width="100%">
-                                                                        <tbody>
+																		<tbody>
-                                                                            <tr>
+																			<tr>
-                                                                                <td style="border:0;">
+																				<td style="border:0;">
-                                                                                    <form action="{{ guild.link }}" method="post">
+																					<form action="{{ guild.link }}" method="post">
-                                                                                        {{ include('buttons.view.html.twig') }}
+																						{{ include('buttons.view.html.twig') }}
-                                                                                    </form>
+																					</form>
-                                                                                </td>
+																				</td>
-                                                                            </tr>
+																			</tr>
-                                                                        </tbody>
+																		</tbody>
-                                                                    </table>
+																	</table>
-                                                                </td>
+																</td>
-                                                            </tr>
+															</tr>
-                                                            {% endfor %}
+															{% endfor %}
-                                                        {% else %}
+														{% else %}
-                                                        <tr bgcolor="{{ config.darkborder }}">
+														<tr bgcolor="{{ config.darkborder }}">
-                                                            <td valign="top">
+															<td valign="top">
-                                                                <b>Create Guild</b>
+																<b>Create Guild</b>
-                                                                <br/>
+																<br/>
-                                                                Actually there is no guild on server.{% if logged %} Create first! Press button "Create Guild"{% endif %}
+																Actually there is no guild on server.{% if logged %} Create first! Press button "Create Guild"{% endif %}
-                                                            </td>
+															</td>
 
-                                                            {% if logged %}
+															{% if logged %}
-                                                            <td>
+															<td>
-                                                                <table border="0" cellpadding="0" cellspacing="0" width="100%">
+																<table border="0" cellpadding="0" cellspacing="0" width="100%">
-                                                                    <form action="?subtopic=guilds&action=create" method="post">
+																	<form action="?subtopic=guilds&action=create" method="post">
-                                                                        <form action="?subtopic=guilds&action=create" method="post">
+																		<form action="?subtopic=guilds&action=create" method="post">
-                                                                            {% set button_name = 'Found Guild' %}
+																			{% set button_name = 'Found Guild' %}
-                                                                            {% set button_image = '_sbutton_foundguild' %}
+																			{% set button_image = '_sbutton_foundguild' %}
-                                                                            {% include('buttons.base.html.twig') %}
+																			{% include('buttons.base.html.twig') %}
-                                                                        </form>
+																		</form>
-                                                                    </form>
+																	</form>
-                                                                </table>
+																</table>
-                                                            </td>
+															</td>
-                                                            {% endif %}
+															{% endif %}
-                                                        </tr>
+														</tr>
-                                                        {% endif %}
+														{% endif %}
-                                                    </tbody>
+													</tbody>
-                                                </table>
+												</table>
-                                            </div>
+											</div>
-                                        </div>
+										</div>
-                                        <div class="TableShadowContainer">
+										<div class="TableShadowContainer">
-                                            <div class="TableBottomShadow" style="background-image:url(https://static.tibia.com/images/global/content/table-shadow-bm.gif);">
+											<div class="TableBottomShadow" style="background-image:url(https://static.tibia.com/images/global/content/table-shadow-bm.gif);">
-                                                <div class="TableBottomLeftShadow" style="background-image:url({{ template_path }}/images/content/table-shadow-bl.gif);"></div>
+												<div class="TableBottomLeftShadow" style="background-image:url({{ template_path }}/images/content/table-shadow-bl.gif);"></div>
-                                                <div class="TableBottomRightShadow" style="background-image:url({{ template_path }}/images/content/table-shadow-br.gif);"></div>
+												<div class="TableBottomRightShadow" style="background-image:url({{ template_path }}/images/content/table-shadow-br.gif);"></div>
-                                            </div>
+											</div>
-                                        </div>
+										</div>
-                                    </td>
+									</td>
-                                </tr>
+								</tr>
-                            </tbody>
+							</tbody>
-                        </table>
+						</table>
-                    </div>
+					</div>
-                </td>
+				</td>
-            </tr>
+			</tr>
-        </tbody>
+		</tbody>
-    </table>
+	</table>
 </div>
 <br>
 
 <table border="0" cellspacing="1" cellpadding="4" width="100%">
-    <tbody>
+	<tbody>
-        <tr>
+		<tr>
-            <td align="center">
+			<td align="center">
-                <img src="{{ template_path }}images/general/blank.gif" width="80" height="1" border="0">
+				<img src="{{ template_path }}images/general/blank.gif" width="80" height="1" border="0">
-            </td>
+			</td>
 
-            <td align="center">
+			<td align="center">
-                <table border="0" cellspacing="0" cellpadding="0">
+				<table border="0" cellspacing="0" cellpadding="0">
-                    <tbody>
+					<tbody>
-                        {% if logged %}
+						{% if logged %}
-                        No guild found that suits your needs?
+						No guild found that suits your needs?
-                        <form action="?subtopic=guilds&action=create" method="post">
+						<form action="?subtopic=guilds&action=create" method="post">
-                            {% set button_name = 'Found Guild' %}
+							{% set button_name = 'Found Guild' %}
-                            {% set button_image = '_sbutton_foundguild' %}
+							{% set button_image = '_sbutton_foundguild' %}
-                            {% include('buttons.base.html.twig') %}
+							{% include('buttons.base.html.twig') %}
-                        </form>
+						</form>
-                        {% else %}
+						{% else %}
-                        <b>Before you can create a guild you must login.</b>
+						<b>Before you can create a guild you must login.</b>
-                        <br/>
+						<br/>
-                        <form action="?subtopic=accountmanagement&redirect={{ getLink('guilds') }}" method="post">
+						<form action="?subtopic=accountmanagement&redirect={{ getLink('guilds') }}" method="post">
-                            {% include('buttons.login.html.twig') %}
+							{% include('buttons.login.html.twig') %}
-                        </form>
+						</form>
-                        {% endif %}
+						{% endif %}
-                    </tbody>
+					</tbody>
-                </table>
+				</table>
 
-                {% if logged %}
+				{% if logged %}
-                    <br/>
+					<br/>
-                    If you have any problem with guilds try:
+					If you have any problem with guilds try:
-                    <br/>
+					<br/>
-                    <a href="?subtopic=guilds&action=cleanup_players">Cleanup players</a> - can't join guild/be invited? Can't create guild? Try cleanup players.
+					<a href="?subtopic=guilds&action=cleanup_players">Cleanup players</a> - can't join guild/be invited? Can't create guild? Try cleanup players.
-                    <br/>
+					<br/>
-                    <a href="?subtopic=guilds&action=cleanup_guilds">Cleanup guilds</a> - made guild, you are a leader, but you are not on players list? Cleanup guilds!
+					<a href="?subtopic=guilds&action=cleanup_guilds">Cleanup guilds</a> - made guild, you are a leader, but you are not on players list? Cleanup guilds!
-                {% endif %}
+				{% endif %}
-            </td>
+			</td>
 
-            <td align="center">
+			<td align="center">
-                <img src="{{ template_path }}/images/general/blank.gif" width="80" height="1" border="0">
+				<img src="{{ template_path }}/images/general/blank.gif" width="80" height="1" border="0">
-            </td>
+			</td>
-        </tr>
+		</tr>
-    </tbody>
+	</tbody>
 </table>
 
 

system/templates/guilds.view.html.twig

@@ -1,347 +1,349 @@
 <div class="Border_2">
-    <div class="Border_3">
+	<div class="Border_3">
-        <div class="BoxContent">
+		<div class="BoxContent">
-            <table border="0" width="100%">
+			<table border="0" width="100%">
-                <tbody>
+				<tbody>
-                <tr>
+				<tr>
-                    <td width="64">
+					<td width="64">
-                        <img src="{{ constant('GUILD_IMAGES_DIR') }}{{ logo }}" width="64" height="64">
+						<img src="{{ constant('GUILD_IMAGES_DIR') }}{{ logo }}" width="64" height="64">
-                    </td>
+					</td>
 
-                    <td align="center" width="100%"><h1>{{ guild_name }}</h1></td>
+					<td align="center" width="100%"><h1>{{ guild_name }}</h1></td>
 
-                    <td width="64">
+					<td width="64">
-                        <img src="{{ constant('GUILD_IMAGES_DIR') }}{{ logo }}" width="64" height="64">
+						<img src="{{ constant('GUILD_IMAGES_DIR') }}{{ logo }}" width="64" height="64">
-                    </td>
+					</td>
-                </tr>
+				</tr>
-                </tbody>
+				</tbody>
-            </table>
+			</table>
-            <br>
+			<br>
 
-            <table width="100%">
+			<table width="100%">
-                <tbody>
+				<tbody>
-                <tr>
+				<tr>
-                    <td style="vertical-align:top;">
+					<td style="vertical-align:top;">
-                        <div class="TableContainer">
+						<div class="TableContainer">
-                            <div class="TableContainer">
+							<div class="TableContainer">
-                                <div class="CaptionContainer">
+								<div class="CaptionContainer">
-                                    <div class="CaptionInnerContainer">
+									<div class="CaptionInnerContainer">
-                                        <span class="CaptionEdgeLeftTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+										<span class="CaptionEdgeLeftTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-                                        <span class="CaptionEdgeRightTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+										<span class="CaptionEdgeRightTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-                                        <span class="CaptionBorderTop" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
+										<span class="CaptionBorderTop" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
-                                        <span class="CaptionVerticalLeft" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
+										<span class="CaptionVerticalLeft" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
-                                        <div class="Text">Guild Information</div>
+										<div class="Text">Guild Information</div>
-                                        <span class="CaptionVerticalRight" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
+										<span class="CaptionVerticalRight" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
-                                        <span class="CaptionBorderBottom" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
+										<span class="CaptionBorderBottom" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
-                                        <span class="CaptionEdgeLeftBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+										<span class="CaptionEdgeLeftBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-                                        <span class="CaptionEdgeRightBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+										<span class="CaptionEdgeRightBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-                                    </div>
+									</div>
-                                </div>
+								</div>
-                            </div>
+							</div>
 
-                            <table class="Table1" cellpadding="0" cellspacing="0">
+							<table class="Table1" cellpadding="0" cellspacing="0">
-                                <tbody>
+								<tbody>
-                                <tr>
+								<tr>
-                                    <td>
+									<td>
-                                        <div class="InnerTableContainer">
+										<div class="InnerTableContainer">
-                                            <table style="width:100%;">
+											<table style="width:100%;">
-                                                <tbody>
+												<tbody>
-                                                <tr>
+												<tr>
-                                                    <td>
+													<td>
-                                                        <div id="GuildInformationContainer">
+														<div id="GuildInformationContainer">
-                                                            {% if descriptions is not empty %}
+															{% if descriptions is not empty %}
-                                                                {{ description }}
+																{{ description }}
-                                                                <br>
+																<br>
-                                                                <br>
+																<br>
-                                                            {% endif %}
+															{% endif %}
 
-                                                            {% if guild_owner is not empty %}
+															{% if guild_owner is not empty %}
-                                                                {% set guildOwnerName = guild_owner.getName() %}
+																{% set guildOwnerName = guild_owner.getName() %}
 
-                                                                <a href="{{ getPlayerLink(guildOwnerName, false) }}"><b>{{ guildOwnerName }}</b></a> is guild leader of <b>{{ guild_name }}</b>.
+																<a href="{{ getPlayerLink(guildOwnerName, false) }}"><b>{{ guildOwnerName }}</b></a> is guild leader of <b>{{ guild_name }}</b>.
-                                                                <br>
+																<br>
-                                                            {% endif %}
+															{% endif %}
 
-                                                            The guild was founded on {{ config.lua.serverName }} on {{ guild_creation_date|date("j F Y") }}.
+															The guild was founded on {{ config.lua.serverName }} on {{ guild_creation_date|date("j F Y") }}.
-                                                            {% if isLeader %}
+															{% if isLeader %}
-                                                                <a href="?subtopic=guilds&action=manager&guild={{ guild_name }}" style="float: right;">
+																<a href="?subtopic=guilds&action=manager&guild={{ guild_name }}" style="float: right;">
-                                                                    <img src="{{ template_path }}/images/global/buttons/sbutton_manageguild.png" style="width: 120px; height: 20px;" alt="Manage Guild">
+																	<img src="{{ template_path }}/images/global/buttons/sbutton_manageguild.png" style="width: 120px; height: 20px;" alt="Manage Guild">
-                                                                </a>
+																</a>
-                                                            {% endif %}
+															{% endif %}
-                                                        </div>
+														</div>
-                                                    </td>
+													</td>
-                                                </tr>
+												</tr>
-                                                </tbody>
+												</tbody>
-                                            </table>
+											</table>
-                                        </div>
+										</div>
-                                    </td>
+									</td>
-                                </tr>
+								</tr>
-                                </tbody>
+								</tbody>
-                            </table>
+							</table>
-                        </div>
+						</div>
-                    </td>
+					</td>
-                </tr>
+				</tr>
-                </tbody>
+				</tbody>
-            </table>
+			</table>
 
-            <br>
+			<br>
-            <div class="TableContainer">
+			<div class="TableContainer">
-                <div class="TableContainer">
+				<div class="TableContainer">
-                    <div class="CaptionContainer">
+					<div class="CaptionContainer">
-                        <div class="CaptionInnerContainer">
+						<div class="CaptionInnerContainer">
-                            <span class="CaptionEdgeLeftTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+							<span class="CaptionEdgeLeftTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-                            <span class="CaptionEdgeRightTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+							<span class="CaptionEdgeRightTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-                            <span class="CaptionBorderTop" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
+							<span class="CaptionBorderTop" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
-                            <span class="CaptionVerticalLeft" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
+							<span class="CaptionVerticalLeft" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
-                            <div class="Text">Guild Members</div>
+							<div class="Text">Guild Members</div>
-                            <span class="CaptionVerticalRight" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
+							<span class="CaptionVerticalRight" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
-                            <span class="CaptionBorderBottom" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
+							<span class="CaptionBorderBottom" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
-                            <span class="CaptionEdgeLeftBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+							<span class="CaptionEdgeLeftBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-                            <span class="CaptionEdgeRightBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+							<span class="CaptionEdgeRightBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-                        </div>
+						</div>
-                    </div>
+					</div>
-                </div>
+				</div>
 
-                <table class="Table3" cellpadding="0" cellspacing="0">
+				<table class="Table3" cellpadding="0" cellspacing="0">
-                    <tbody>
+					<tbody>
-                    <tr>
+					<tr>
-                        <td>
+						<td>
-                            <div class="InnerTableContainer">
+							<div class="InnerTableContainer">
-                                <table style="width:100%;">
+								<table style="width:100%;">
-                                    <tbody>
+									<tbody>
-                                    <tr>
+									<tr>
-                                        <td>
+										<td>
-                                            <div class="TableContentAndRightShadow">
+											<div class="TableContentAndRightShadow">
-                                                <div class="TableContentContainer">
+												<div class="TableContentContainer">
-                                                    <table class="TableContent" width="100%">
+													<table class="TableContent" width="100%">
-                                                        <tbody>
+														<tbody>
-                                                        <tr class="LabelH">
+														<tr class="LabelH">
-                                                            <td>Rank</td>
+															<td>Rank</td>
-                                                            <td>Name{% if useGuildNick %} and Title{% endif %}</td>
+															<td>Name{% if useGuildNick %} and Title{% endif %}</td>
-                                                            <td>Vocation</td>
+															<td>Vocation</td>
-                                                            <td>Level</td>
+															<td>Level</td>
-                                                            <td>Status</td>
+															<td>Status</td>
-                                                        </tr>
+														</tr>
 
-                                                        {% set showedRank, i = false, 0 %}
+														{% set showedRank, i = false, 0 %}
-                                                        {% for rank in guild_members if rank.members|length > 0 %}
+														{% for rank in guild_members if rank.members|length > 0 %}
-                                                            {% set rankStyle, i = getStyle(i), i + 1  %}
+															{% set rankStyle, i = getStyle(i), i + 1  %}
 
-                                                            {% for player in rank.members %}
+															{% for player in rank.members %}
-                                                                <tr bgcolor="{{ rankStyle }}">
+																<tr bgcolor="{{ rankStyle }}">
-                                                                    <td>
+																	<td>
-                                                                        {% if not showedRank %}{{ rank.rank_name }}{% endif %}
+																		{% if not showedRank %}{{ rank.rank_name }}{% endif %}
-                                                                        {% set showedRank = true %}
+																		{% set showedRank = true %}
-                                                                    </td>
+																	</td>
 
-                                                                    <td>
+																	<td>
-                                                                        {% set playerName = player.getName() %}
+																		{% set playerName = player.getName() %}
-                                                                        <form action="?subtopic=guilds&action=change_nick&name={{ playerName }}&guild={{ guild_name }}" method="post">
+																		<form action="?subtopic=guilds&action=change_nick&name={{ playerName }}&guild={{ guild_name }}" method="post">
-                                                                            {{ getPlayerLink(playerName, true)|raw }}
+																			{{ getPlayerLink(playerName, true)|raw }}
 
-                                                                            {% set showGuildNick = false %}
+																			{% set showGuildNick = false %}
-                                                                            {% if player.getGuildNick() is not empty %}
+																			{% if player.getGuildNick() is not empty %}
-                                                                                {% set showGuildNick = true %}
+																				{% set showGuildNick = true %}
-                                                                                {% set guildNickRaw = player.getGuildNick()|raw %}
+																				{% set guildNickRaw = player.getGuildNick()|raw %}
-                                                                            {% endif %}
+																			{% endif %}
 
-                                                                            {% if logged %}
+																			{% if logged %}
-                                                                                {% if player.getId() in players_from_account_ids %}
+																				{% if player.getId() in players_from_account_ids %}
-                                                                                    (<input type="text" name="nick" value="{{ guildNickRaw }}"><input type="submit" value="Change">)
+																					(<input type="text" name="nick" value="{{ guildNickRaw }}"><input type="submit" value="Change">)
-                                                                                {% else %}
+																				{% else %}
-                                                                                    {% if showGuildNick %} ({{ guildNickRaw }}){% endif %}
+																					{% if showGuildNick %} ({{ guildNickRaw }}){% endif %}
-                                                                                {% endif %}
+																				{% endif %}
 
-                                                                                {% if level_in_guild > rank.rank_level or isLeader %}
+																				{% if level_in_guild > rank.rank_level or isLeader %}
-                                                                                    {% if guildOwnerName != playerName %}
+																					{% if guildOwnerName != playerName %}
-                                                                                        <span style="font-size: 10px; float: right">
+																						<span style="font-size: 10px; float: right">
-                                                                                            {<a href="?subtopic=guilds&action=kick_player&guild={{ guild_name|url_encode }}&name={{ playerName|url_encode }}">KICK</a>}
+																							{<a href="?subtopic=guilds&action=kick_player&guild={{ guild_name|url_encode }}&name={{ playerName|url_encode }}">KICK</a>}
-                                                                                        </span>
+																						</span>
-                                                                                    {% endif %}
+																					{% endif %}
-                                                                                {% endif %}
+																				{% endif %}
-                                                                            {% else %}
+																			{% else %}
-                                                                                {% if showGuildNick %} ({{ guildNickRaw }}){% endif %}
+																				{% if showGuildNick %} ({{ guildNickRaw }}){% endif %}
-                                                                            {% endif %}
+																			{% endif %}
-                                                                        </form>
+																		</form>
-                                                                    </td>
+																	</td>
 
-                                                                    <td>{{ player.getVocationName() }}</td>
+																	<td>{{ player.getVocationName() }}</td>
-                                                                    <td>{{ player.getLevel() }}</td>
+																	<td>{{ player.getLevel() }}</td>
-                                                                    <td>
+																	<td>
-                                                                        <span style="color: {% if player.isOnline() %} green;"><b>Online{% else %} red;"><b>Offline{% endif %}</b></span>
+																		<span style="color: {% if player.isOnline() %} green;"><b>Online{% else %} red;"><b>Offline{% endif %}</b></span>
-                                                                    </td>
+																	</td>
-                                                                </tr>
+																</tr>
-                                                            {% endfor %}
+															{% endfor %}
 
-                                                            {% set showedRank = false %}
+															{% set showedRank = false %}
-                                                        {% else %}
+														{% else %}
-                                                            <tr bgcolor="{{ getStyle(i) }}">
+															<tr bgcolor="{{ getStyle(i) }}">
-                                                                <td colspan="5">No guild members found.</td>
+																<td colspan="5">No guild members found.</td>
-                                                            </tr>
+															</tr>
-                                                        {% endfor %}
+														{% endfor %}
-                                                        </tbody>
+														</tbody>
-                                                    </table>
+													</table>
-                                                </div>
+												</div>
-                                            </div>
+											</div>
-                                        </td>
+										</td>
-                                    </tr>
+									</tr>
-                                    </tbody>
+									</tbody>
-                                </table>
+								</table>
-                            </div>
+							</div>
-                        </td>
+						</td>
-                    </tr>
+					</tr>
-                    </tbody>
+					</tbody>
-                </table>
+				</table>
-            </div>
+			</div>
-            <br>
+			<br>
 
-            <div class="TableContainer">
+			<div class="TableContainer">
-                <div class="CaptionContainer">
+				<div class="CaptionContainer">
-                    <div class="CaptionInnerContainer">
+					<div class="CaptionInnerContainer">
-                        <span class="CaptionEdgeLeftTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+						<span class="CaptionEdgeLeftTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-                        <span class="CaptionEdgeRightTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+						<span class="CaptionEdgeRightTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-                        <span class="CaptionBorderTop" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
+						<span class="CaptionBorderTop" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
-                        <span class="CaptionVerticalLeft" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
+						<span class="CaptionVerticalLeft" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
-                        <div class="Text">Invited Characters</div>
+						<div class="Text">Invited Characters</div>
-                        <span class="CaptionVerticalRight" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
+						<span class="CaptionVerticalRight" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
-                        <span class="CaptionBorderBottom" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
+						<span class="CaptionBorderBottom" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
-                        <span class="CaptionEdgeLeftBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+						<span class="CaptionEdgeLeftBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-                        <span class="CaptionEdgeRightBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+						<span class="CaptionEdgeRightBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-                    </div>
+					</div>
-                </div>
+				</div>
 
-                <table class="Table3" cellpadding="0" cellspacing="0">
+				<table class="Table3" cellpadding="0" cellspacing="0">
-                    <tbody>
+					<tbody>
-                    <tr>
+					<tr>
-                        <td>
+						<td>
-                            <div class="InnerTableContainer">
+							<div class="InnerTableContainer">
-                                <table style="width:100%;">
+								<table style="width:100%;">
-                                    <tbody>
+									<tbody>
-                                    <tr>
+									<tr>
-                                        <td>
+										<td>
-                                            <div class="TableContentContainer">
+											<div class="TableContentContainer">
-                                                <table class="TableContent" width="100%">
+												<table class="TableContent" width="100%">
-                                                    <tbody>
+													<tbody>
-                                                    <tr class="LabelH">
+													<tr class="LabelH">
-                                                        <td><b>Name</b></td>
+														<td><b>Name</b></td>
-                                                    </tr>
+													</tr>
 
-                                                    {% set i = 0 %}
+													{% set i = 0 %}
-                                                    {% for invited_player in invited_list if invited_list|length > 0 %}
+													{% for invited_player in invited_list if invited_list|length > 0 %}
-                                                        {% if invited_player.isLoaded() %}
+														{% if invited_player.isLoaded() %}
-                                                            <tr bgcolor="{{ getStyle(i) }}">
+															<tr bgcolor="{{ getStyle(i) }}">
-                                                                {% set i = i + 1 %}
+																{% set i = i + 1 %}
 
-                                                                <td>
+																<td>
-                                                                    {{ getPlayerLink(invited_player.getName(), true)|raw }}
+																	{{ getPlayerLink(invited_player.getName(), true)|raw }}
 
-                                                                    {% if isVice %}
+																	{% if isVice %}
-                                                                        <div style="float: right">
+																		<div style="float: right">
-                                                                            {<a href="?subtopic=guilds&action=delete_invite&guild={{ guild_name|url_encode }}&name={{ invited_player.getName()|url_encode }}">Cancel Invitation</a>}
+																			{<a href="?subtopic=guilds&action=delete_invite&guild={{ guild_name|url_encode }}&name={{ invited_player.getName()|url_encode }}">Cancel Invitation</a>}
-                                                                        </div>
+																		</div>
-                                                                    {% endif %}
+																	{% endif %}
-                                                                </td>
+																</td>
-                                                            </tr>
+															</tr>
-                                                        {% endif %}
+														{% endif %}
-                                                    {% else %}
+													{% else %}
-                                                        <tr bgcolor="{{ getStyle(i) }}">
+														<tr bgcolor="{{ getStyle(i) }}">
-                                                            <td>
+															<td>
-                                                                No invited characters found.
+																No invited characters found.
-                                                            </td>
+															</td>
-                                                        </tr>
+														</tr>
-                                                    {% endfor %}
+													{% endfor %}
-                                                    </tbody>
+													</tbody>
-                                                </table>
+												</table>
-                                            </div>
+											</div>
-                                        </td>
+										</td>
-                                    </tr>
+									</tr>
-                                    </tbody>
+									</tbody>
-                                </table>
+								</table>
-                            </div>
+							</div>
-                        </td>
+						</td>
-                    </tr>
+					</tr>
-                    </tbody>
+					</tbody>
-                </table>
+				</table>
-            </div>
+			</div>
-            <br>
+			<br>
 
-            <div class="TableContainer">
+			{{ hook(constant('HOOK_GUILDS_AFTER_INVITED_CHARACTERS'), { 'guild': guild, 'isLeader': isLeader }) }}
-                <table class="Table3" cellpadding="0" cellspacing="0">
-                    <tbody>
-                    <tr>
-                        <td>
-                            <div class="InnerTableContainer">
-                                <table style="width:100%;">
-                                    <tbody>
-                                    <tr>
-                                        <td>
-                                            <div class="TableContentContainer">
-                                                <table class="TableContent" width="100%">
-                                                    <tbody>
-                                                    <tr>
-                                                        {% if not logged %}
-                                                            <form action="?subtopic=accountmanagement&redirect={{ getGuildLink(guild_name|url_encode, false) }}" method="post">
-                                                                <td>
-                                                                    {{ include('buttons.login.html.twig') }}
-                                                                </td>
-                                                            </form>
-                                                        {% else %}
-                                                            {% if show_accept_invite > 0 %}
-                                                                <form action="?subtopic=guilds&action=accept_invite&guild={{ guild_name|url_encode }}" method="post">
-                                                                    <td>
-                                                                        <input type="image" name="Accept Invite" alt="Accept Invite" src="{{ template_path }}/images/global/buttons/sbutton_acceptinvite.png" style="width: 120px; height: 20px;">
-                                                                    </td>
-                                                                </form>
-                                                            {% endif %}
 
-                                                            {% if isVice %}
+			<div class="TableContainer">
-                                                                <form action="?subtopic=guilds&action=invite&guild={{ guild_name|url_encode }}" method="post">
+				<table class="Table3" cellpadding="0" cellspacing="0">
-                                                                    <td>
+					<tbody>
-                                                                        {% set button_name = 'Invite Character' %}
+					<tr>
-                                                                        {% set button_image = '_sbutton_invitecharacter' %}
+						<td>
-                                                                        {% include('buttons.base.html.twig') %}
+							<div class="InnerTableContainer">
-                                                                    </td>
+								<table style="width:100%;">
-                                                                </form>
+									<tbody>
+									<tr>
+										<td>
+											<div class="TableContentContainer">
+												<table class="TableContent" width="100%">
+													<tbody>
+													<tr>
+														{% if not logged %}
+															<form action="?subtopic=accountmanagement&redirect={{ getGuildLink(guild_name|url_encode, false) }}" method="post">
+																<td>
+																	{{ include('buttons.login.html.twig') }}
+																</td>
+															</form>
+														{% else %}
+															{% if show_accept_invite > 0 %}
+																<form action="?subtopic=guilds&action=accept_invite&guild={{ guild_name|url_encode }}" method="post">
+																	<td>
+																		<input type="image" name="Accept Invite" alt="Accept Invite" src="{{ template_path }}/images/global/buttons/sbutton_acceptinvite.png" style="width: 120px; height: 20px;">
+																	</td>
+																</form>
+															{% endif %}
 
-                                                                <form action="?subtopic=guilds&action=change_rank&guild={{ guild_name|url_encode }}" method="post">
+															{% if isVice %}
-                                                                    <td>
+																<form action="?subtopic=guilds&action=invite&guild={{ guild_name|url_encode }}" method="post">
-                                                                        {% set button_name = 'Edit Ranks' %}
+																	<td>
-                                                                        {% set button_image = '_sbutton_editranks' %}
+																		{% set button_name = 'Invite Character' %}
-                                                                        {% include('buttons.base.html.twig') %}
+																		{% set button_image = '_sbutton_invitecharacter' %}
-                                                                    </td>
+																		{% include('buttons.base.html.twig') %}
-                                                                </form>
+																	</td>
-                                                            {% endif %}
+																</form>
 
-                                                            {% if players_from_account_in_guild|length > 0 %}
+																<form action="?subtopic=guilds&action=change_rank&guild={{ guild_name|url_encode }}" method="post">
-                                                                <form action="?subtopic=guilds&action=leave_guild&guild={{ guild_name|url_encode }}" method="post">
+																	<td>
-                                                                    <td>
+																		{% set button_name = 'Edit Ranks' %}
-                                                                        {% set button_name = 'Leave Guild' %}
+																		{% set button_image = '_sbutton_editranks' %}
-                                                                        {% set button_image = '_sbutton_leaveguild' %}
+																		{% include('buttons.base.html.twig') %}
-                                                                        {% include('buttons.base.html.twig') %}
+																	</td>
-                                                                    </td>
+																</form>
-                                                                </form>
+															{% endif %}
-                                                            {% endif %}
-                                                        {% endif %}
 
-                                                        <form action="{{ getLink('guilds') }}" method="post">
+															{% if players_from_account_in_guild|length > 0 %}
-                                                            <td style="float: right">
+																<form action="?subtopic=guilds&action=leave_guild&guild={{ guild_name|url_encode }}" method="post">
-                                                                {{ include('buttons.back.html.twig') }}
+																	<td>
-                                                            </td>
+																		{% set button_name = 'Leave Guild' %}
-                                                        </form>
+																		{% set button_image = '_sbutton_leaveguild' %}
-                                                    </tr>
+																		{% include('buttons.base.html.twig') %}
-                                                    </tbody>
+																	</td>
-                                                </table>
+																</form>
-                                            </div>
+															{% endif %}
-                                        </td>
+														{% endif %}
-                                    </tr>
+
-                                    </tbody>
+														<form action="{{ getLink('guilds') }}" method="post">
-                                </table>
+															<td style="float: right">
-                            </div>
+																{{ include('buttons.back.html.twig') }}
-                        </td>
+															</td>
-                    </tr>
+														</form>
-                    </tbody>
+													</tr>
-                </table>
+													</tbody>
-            </div>
+												</table>
-        </div>
+											</div>
-    </div>
+										</td>
+									</tr>
+									</tbody>
+								</table>
+							</div>
+						</td>
+					</tr>
+					</tbody>
+				</table>
+			</div>
+		</div>
+	</div>
 </div>

system/templates/houses.html.twig

@@ -1,171 +1,171 @@
 <div class="TableContainer">
-    {% if errors is not empty %}
+	{% if errors is not empty %}
-        {% for error in errors %}
+		{% for error in errors %}
-            <p class="error">{{ error }}</p>
+			<p class="error">{{ error }}</p>
-        {% endfor %}
+		{% endfor %}
-    {% else %}
+	{% else %}
-        <table class="Table1" cellpadding="0" cellspacing="0" style="background-color: {{ config.lightborder }}">
+		<table class="Table1" cellpadding="0" cellspacing="0" style="background-color: {{ config.lightborder }}">
-            <div class="CaptionContainer">
+			<div class="CaptionContainer">
-                <div class="CaptionInnerContainer">
+				<div class="CaptionInnerContainer">
-                    <span class="CaptionEdgeLeftTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+					<span class="CaptionEdgeLeftTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-                    <span class="CaptionEdgeRightTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+					<span class="CaptionEdgeRightTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-                    <span class="CaptionBorderTop" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
+					<span class="CaptionBorderTop" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
-                    <span class="CaptionVerticalLeft" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
+					<span class="CaptionVerticalLeft" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
-                    <div class="Text" >House Search</div>
+					<div class="Text" >House Search</div>
-                    <span class="CaptionVerticalRight" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
+					<span class="CaptionVerticalRight" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
-                    <span class="CaptionBorderBottom" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
+					<span class="CaptionBorderBottom" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
-                    <span class="CaptionEdgeLeftBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+					<span class="CaptionEdgeLeftBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-                    <span class="CaptionEdgeRightBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+					<span class="CaptionEdgeRightBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-                </div>
+				</div>
-            </div>
+			</div>
 
-            <tr>
+			<tr>
-                <td>
+				<td>
-                    <div class="InnerTableContainer">
+					<div class="InnerTableContainer">
-                        Here you can see the list of all available houses, flats{{ guildString }}.
+						Here you can see the list of all available houses, flats{{ guildString }}.
-                        Click on any view button to get more information about a house or adjust
+						Click on any view button to get more information about a house or adjust
-                        the search criteria and start a new search.
+						the search criteria and start a new search.
-                        <br><br>
+						<br><br>
-                        {% if cleanOldHouse is not empty or rentType != 'never' %}
+						{% if cleanOldHouse is not empty or rentType != 'never' %}
-                            Every morning during global server save there is automatic house cleaning. Server delete house owners who have not logged in last {{ cleanOldHouse }} days{% if rentType != 'never' %} or have not paid {{ rentType }} house rent. Remember to leave money for a rent in {% if config.lua.bankSystem is not empty %}your house bank or {% else %}depo in same city where you have house!{% endif %}{% else %}.{% endif %}
+							Every morning during global server save there is automatic house cleaning. Server delete house owners who have not logged in last {{ cleanOldHouse }} days{% if rentType != 'never' %} or have not paid {{ rentType }} house rent. Remember to leave money for a rent in {% if config.lua.bankSystem is not empty %}your house bank or {% else %}depo in same city where you have house!{% endif %}{% else %}.{% endif %}
-                            <br><br>
+							<br><br>
-                        {% endif %}
+						{% endif %}
 
-                        {% if houses is not empty or housesSearch %}
+						{% if houses is not empty or housesSearch %}
-                        <table border="0" cellspacing="1" cellpadding="4" width="100%">
+						<table border="0" cellspacing="1" cellpadding="4" width="100%">
-                            <tbody>
+							<tbody>
-                                <tr bgcolor="{{ config.vdarkborder }}">
+								<tr bgcolor="{{ config.vdarkborder }}">
-                                    <td colspan="6" class="white"><b>Available {{ houseType }}{% if townName is not empty %} in {{ townName }}{% endif %} on <b>{{ config.lua.serverName }}</b></b></td>
+									<td colspan="6" class="white"><b>Available {{ houseType }}{% if townName is not empty %} in {{ townName }}{% endif %} on <b>{{ config.lua.serverName }}</b></b></td>
-                                </tr>
+								</tr>
 
-                                <tr bgcolor="{{ config.darkborder }}">
+								<tr bgcolor="{{ config.darkborder }}">
-                                    {% if houses is not empty %}
+									{% if houses is not empty %}
-                                        <td width="40%"><b>Name</b></td>
+										<td width="40%"><b>Name</b></td>
-                                        <td width="10%"><b>Size</b></td>
+										<td width="10%"><b>Size</b></td>
-                                        <td width="10%"><b>Rent</b></td>
+										<td width="10%"><b>Rent</b></td>
 
-                                        <td width="40%"><b>Status</b></td>
+										<td width="40%"><b>Status</b></td>
-                                        <td>&nbsp;</td>
+										<td>&nbsp;</td>
-                                    {% elseif housesSearch %}
+									{% elseif housesSearch %}
-                                        <td>No {{ houseType }} with specified criterias.</td>
+										<td>No {{ houseType }} with specified criterias.</td>
-                                    {% endif %}
+									{% endif %}
-                                </tr>
+								</tr>
 
-                                {% if houses is not empty %}
+								{% if houses is not empty %}
-                                    {% set i = 0 %}
+									{% set i = 0 %}
-                                    {% for house in houses %}
+									{% for house in houses %}
-                                        {% set i = i + 1 %}
+										{% set i = i + 1 %}
-                                        <tr bgcolor="{{ getStyle(i) }}">
+										<tr bgcolor="{{ getStyle(i) }}">
-                                            <td width="40%">
+											<td width="40%">
-                                                {{ house.name }}
+												{{ house.name }}
-                                            </td>
+											</td>
 
-                                            <td width="10%">
+											<td width="10%">
-                                                {{ house.size }}
+												{{ house.size }}
-                                            </td>
+											</td>
 
-                                            <td width="10%">
+											<td width="10%">
-                                                {{ house.rent }} golds
+												{{ house.rent }} golds
-                                            </td>
+											</td>
 
-                                            <td width="40%">
+											<td width="40%">
-                                                {{ house.rentedBy|raw }}
+												{{ house.rentedBy|raw }}
-                                            </td>
+											</td>
 
-                                            <td>
+											<td>
-                                                <form action="{{ getLink('houses/view') }}" method="post">
+												<form action="{{ getLink('houses/view') }}" method="post">
-                                                    <input type="hidden" name="house" value="{{ house.name }}">
+													<input type="hidden" name="house" value="{{ house.name }}">
-                                                    {{ include('buttons.view.html.twig') }}
+													{{ include('buttons.view.html.twig') }}
-                                                </form>
+												</form>
-                                            </td>
+											</td>
-                                        </tr>
+										</tr>
-                                    {% endfor %}
+									{% endfor %}
-                                {% endif %}
+								{% endif %}
-                            </tbody>
+							</tbody>
-                        </table>
+						</table>
-                        <br>
+						<br>
-                        {% endif %}
+						{% endif %}
 
-                        <form action="{{ getLink('houses') }}" method="post">
+						<form action="{{ getLink('houses') }}" method="post">
-                            <table border="0" cellspacing="1" cellpadding="4" width="100%">
+							<table border="0" cellspacing="1" cellpadding="4" width="100%">
-                                <tbody>
+								<tbody>
-                                    <tr bgcolor="{{ config.vdarkborder }}">
+									<tr bgcolor="{{ config.vdarkborder }}">
-                                        <td colspan="4" class="white"><b>House Search</b></td>
+										<td colspan="4" class="white"><b>House Search</b></td>
-                                    </tr>
+									</tr>
 
-                                    <tr bgcolor="{{ config.darkborder }}">
+									<tr bgcolor="{{ config.darkborder }}">
-                                        <td width="25%"><b>Town</b></td>
+										<td width="25%"><b>Town</b></td>
-                                        <td width="25%"><b>Status</b></td>
+										<td width="25%"><b>Status</b></td>
-                                        <td width="25%"><b>Order</b></td>
+										<td width="25%"><b>Order</b></td>
-                                    </tr>
+									</tr>
 
-                                    <tr bgcolor="{{ config.darkborder }}">
+									<tr bgcolor="{{ config.darkborder }}">
-                                        <td valign="top" rowspan="2">
+										<td valign="top" rowspan="2">
-                                            {% set checked = false %}
+											{% set checked = false %}
-                                            {% for id, name in config.towns if id > 0 %}
+											{% for id, name in config.towns if id > 0 %}
-                                                {% if ((townId is empty and name is not empty) or id == townId) and not checked %}
+												{% if ((townId is empty and name is not empty) or id == townId) and not checked %}
-                                                    {% set variable = "checked" %}
+													{% set variable = "checked" %}
-                                                    {% set checked = true %}
+													{% set checked = true %}
-                                                {% else %}
+												{% else %}
-                                                    {% set variable = "" %}
+													{% set variable = "" %}
-                                                {% endif %}
+												{% endif %}
 
-                                                <input type="radio" name="town" id="town_{{ id }}" value="{{ id }}"{% if variable is defined %} {{ variable }}{% endif %}>
+												<input type="radio" name="town" id="town_{{ id }}" value="{{ id }}"{% if variable is defined %} {{ variable }}{% endif %}>
-                                                <label for="town_{{ id }}"> {{ name }}</label>
+												<label for="town_{{ id }}"> {{ name }}</label>
-                                                <br>
+												<br>
-                                            {% endfor %}
+											{% endfor %}
-                                        </td>
+										</td>
 
-                                        <td valign="top">
+										<td valign="top">
-                                            <input type="radio" name="state" id="state_all" value=""{% if state is empty %} checked{% endif %}>
+											<input type="radio" name="state" id="state_all" value=""{% if state is empty %} checked{% endif %}>
-                                            <label for="state_all">all states</label><br>
+											<label for="state_all">all states</label><br>
 
-                                            <input type="radio" name="state" id="state_free" value="free"{% if state == 'free' %} checked{% endif %}>
+											<input type="radio" name="state" id="state_free" value="free"{% if state == 'free' %} checked{% endif %}>
-                                            <label for="state_free">free</label><br>
+											<label for="state_free">free</label><br>
 
-                                            <input type="radio" name="state" id="state_rented" value="rented"{% if state == 'rented' %} checked{% endif %}>
+											<input type="radio" name="state" id="state_rented" value="rented"{% if state == 'rented' %} checked{% endif %}>
-                                            <label for="state_rented">rented</label><br>
+											<label for="state_rented">rented</label><br>
-                                        </td>
+										</td>
 
-                                        <td valign="top" rowspan="2">
+										<td valign="top" rowspan="2">
-                                            <input type="radio" name="order" id="order_name" value=""{% if order is empty %} checked{% endif %}>
+											<input type="radio" name="order" id="order_name" value=""{% if order is empty %} checked{% endif %}>
-                                            <label for="order_name"> by name</label><br>
+											<label for="order_name"> by name</label><br>
 
-                                            <input type="radio" name="order" id="order_size" value="size"{% if order == 'size' %} checked{% endif %}>
+											<input type="radio" name="order" id="order_size" value="size"{% if order == 'size' %} checked{% endif %}>
-                                            <label for="order_size"> by size</label><br>
+											<label for="order_size"> by size</label><br>
 
-                                            <input type="radio" name="order" id="order_rent" value="rent"{% if order == 'rent' %} checked{% endif %}>
+											<input type="radio" name="order" id="order_rent" value="rent"{% if order == 'rent' %} checked{% endif %}>
-                                            <label for="order_rent"> by rent</label><br>
+											<label for="order_rent"> by rent</label><br>
-                                        </td>
+										</td>
-                                    </tr>
+									</tr>
 
-                                    <tr bgcolor="{{ config.darkborder }}">
+									<tr bgcolor="{{ config.darkborder }}">
-                                        <td valign="top">
+										<td valign="top">
-                                            <input type="radio" name="type" id="type_all" value=""{% if type is empty %} checked{% endif %}>
+											<input type="radio" name="type" id="type_all" value=""{% if type is empty %} checked{% endif %}>
-                                            <label for="type"> all</label><br>
+											<label for="type"> all</label><br>
-                                            <input type="radio" name="type" id="type_houses" value="houses"{% if type == 'houses' %} checked{% endif %}>
+											<input type="radio" name="type" id="type_houses" value="houses"{% if type == 'houses' %} checked{% endif %}>
-                                            <label for="type_houses"> houses and flats</label><br>
+											<label for="type_houses"> houses and flats</label><br>
-                                            <input type="radio" name="type" id="type_guildhalls" value="guildhalls"{% if type == 'guildhalls' %} checked{% endif %}>
+											<input type="radio" name="type" id="type_guildhalls" value="guildhalls"{% if type == 'guildhalls' %} checked{% endif %}>
-                                            <label for="type_guildhalls"> guildhalls</label><br>
+											<label for="type_guildhalls"> guildhalls</label><br>
-                                        </td>
+										</td>
-                                    </tr>
+									</tr>
-                                </tbody>
+								</tbody>
-                            </table>
+							</table>
-                            <br>
+							<br>
 
-                            <table border="0" cellspacing="0" cellpadding="0" width="100%">
+							<table border="0" cellspacing="0" cellpadding="0" width="100%">
-                                <tbody>
+								<tbody>
-                                    <tr align="center">
+									<tr align="center">
-                                        <td>
+										<td>
-                                            {{ include('buttons.submit.html.twig') }}
+											{{ include('buttons.submit.html.twig') }}
-                                        </td>
+										</td>
-                                    </tr>
+									</tr>
-                                </tbody>
+								</tbody>
-                            </table>
+							</table>
-                        </form>
+						</form>
-                    </div>
+					</div>
-                </td>
+				</td>
-            </tr>
+			</tr>
-        </table>
+		</table>
-    {% endif %}
+	{% endif %}
 </div>

system/templates/houses.view.html.twig

@@ -1,51 +1,51 @@
 <div class="TableContainer">
-    {% if errors is not empty %}
+	{% if errors is not empty %}
-        {% for error in errors %}
+		{% for error in errors %}
-            <p class="error">{{ error }}</p>
+			<p class="error">{{ error }}</p>
-        {% endfor %}
+		{% endfor %}
-    {% else %}
+	{% else %}
-        <table class="Table1" cellpadding="0" cellspacing="0" style="background-color: {{ config.lightborder }}">
+		<table class="Table1" cellpadding="0" cellspacing="0" style="background-color: {{ config.lightborder }}">
-            <div class="CaptionContainer">
+			<div class="CaptionContainer">
-                <div class="CaptionInnerContainer">
+				<div class="CaptionInnerContainer">
-                    <span class="CaptionEdgeLeftTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+					<span class="CaptionEdgeLeftTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-                    <span class="CaptionEdgeRightTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+					<span class="CaptionEdgeRightTop" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-                    <span class="CaptionBorderTop" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
+					<span class="CaptionBorderTop" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
-                    <span class="CaptionVerticalLeft" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
+					<span class="CaptionVerticalLeft" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
-                    <div class="Text" >{{ houseName }}</div>
+					<div class="Text" >{{ houseName }}</div>
-                    <span class="CaptionVerticalRight" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
+					<span class="CaptionVerticalRight" style="background-image:url({{ template_path }}/images/content/box-frame-vertical.gif);"></span>
-                    <span class="CaptionBorderBottom" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
+					<span class="CaptionBorderBottom" style="background-image:url({{ template_path }}/images/content/table-headline-border.gif);"></span>
-                    <span class="CaptionEdgeLeftBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+					<span class="CaptionEdgeLeftBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-                    <span class="CaptionEdgeRightBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
+					<span class="CaptionEdgeRightBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
-                </div>
+				</div>
-            </div>
+			</div>
 
-            <tr>
+			<tr>
-                <td>
+				<td>
-                    <div class="InnerTableContainer">
+					<div class="InnerTableContainer">
-                        <table border="0" cellpadding="4" cellspacing="1" width="100%">
+						<table border="0" cellpadding="4" cellspacing="1" width="100%">
-                            <tr style="display: inline-flex;">
+							<tr style="display: inline-flex;">
-                                <td><img src="{{ imgPath }}"></td>
+								<td><img src="{{ imgPath }}"></td>
-                                <td>
+								<td>
-                                    {{ bedsMessage }} and has a size of <b>{{ houseSize }} square meters</b>.
+									{{ bedsMessage }} and has a size of <b>{{ houseSize }} square meters</b>.
 
-                                    {% if rentType != 'never' %}
+									{% if rentType != 'never' %}
-                                        The {{ rentType }} is <b>{{ houseRent }} gold</b> and will be debited to the bank account on <b>{{ config.lua.serverName }}</b>.
+										The {{ rentType }} is <b>{{ houseRent }} gold</b> and will be debited to the bank account on <b>{{ config.lua.serverName }}</b>.
-                                    {% endif %}
+									{% endif %}
-                                    <br>
+									<br>
 
-                                    {% if owner is not empty  %}
+									{% if owner is not empty  %}
-                                    The house has been rented by <b>{{ owner|raw }}</b>.
+									The house has been rented by <b>{{ owner|raw }}</b>.
-                                    {% else %}
+									{% else %}
-                                    No one has bought this house yet.
+									No one has bought this house yet.
-                                    {% endif %}
+									{% endif %}
-                                </td>
+								</td>
-                            </tr>
+							</tr>
-                        </table>
+						</table>
-                    </div>
+					</div>
-                </td>
+				</td>
-            </tr>
+			</tr>
-        </table>
+		</table>
-    {% endif %}
+	{% endif %}
 
 </div>
 <br><br>

system/templates/tables.headline.html.twig

@@ -12,7 +12,7 @@
 			<span class="CaptionEdgeRightBottom" style="background-image:url({{ template_path }}/images/content/box-frame-edge.gif);"></span>
 		</div>
 	</div>
-	<table class="Table1" cellpadding="0" cellspacing="0" style="background-color: {{ config.lightborder }}">
+	<table class="Table5" cellpadding="0" cellspacing="0" style="background-color: {{ config.lightborder }}">
 		<tr>
 			<td>
 				<div class="InnerTableContainer">

system/templates/tinymce.html.twig

@@ -9,6 +9,7 @@
 			theme: "silver",
 			plugins: 'preview searchreplace autolink directionality visualblocks visualchars fullscreen image link media template codesample table charmap pagebreak nonbreaking anchor insertdatetime advlist lists wordcount help code emoticons',
 			toolbar1: 'formatselect | bold italic strikethrough forecolor backcolor | emoticons link | alignleft aligncenter alignright alignjustify  | numlist bullist outdent indent  | removeformat code',
+			resize: 'both',
 			image_advtab: true,
 			images_upload_url: '{{ constant('BASE_URL') }}admin/tools/upload_image.php',
 			images_upload_credentials: true,

system/twig.php

@@ -1,4 +1,13 @@
 <?php
+/**
+ * Twig Loader
+ *
+ * @package   MyAAC
+ * @author    Slawkens <slawkens@gmail.com>
+ * @copyright 2021 MyAAC
+ * @link      https://my-aac.org
+ */
+defined('MYAAC') or die('Direct access not allowed!');
 
 use Twig\Environment as Twig_Environment;
 use Twig\Extension\DebugExtension as Twig_DebugExtension;
@@ -61,17 +70,17 @@ $function = new TwigFunction('generateLink', function ($s, $n, $b = false) {
 });
 $twig->addFunction($function);
 
-$function = new TwigFunction('getPlayerLink', function ($s, $p) {
+$function = new TwigFunction('getPlayerLink', function ($s, $p = true) {
 	return getPlayerLink($s, $p);
 });
 $twig->addFunction($function);
 
-$function = new TwigFunction('getMonsterLink', function ($s, $p) {
+$function = new TwigFunction('getMonsterLink', function ($s, $p = true) {
 	return getMonsterLink($s, $p);
 });
 $twig->addFunction($function);
 
-$function = new TwigFunction('getGuildLink', function ($s, $p) {
+$function = new TwigFunction('getGuildLink', function ($s, $p = true) {
     return getGuildLink($s, $p);
 });
 $twig->addFunction($function);
@@ -81,14 +90,14 @@ $function = new TwigFunction('truncate', function ($s, $n) {
 });
 $twig->addFunction($function);
 
-$function = new TwigFunction('hook', function ($hook) {
+$function = new TwigFunction('hook', function ($hook, array $params = []) {
 	global $hooks;
 
 	if(is_string($hook)) {
 		$hook = constant($hook);
 	}
 
-	$hooks->trigger($hook);
+	$hooks->trigger($hook, $params);
 });
 $twig->addFunction($function);
 

templates/tibiacom/account.management.html.twig

@@ -146,10 +146,12 @@
 								<div class="TableContentAndRightShadow" style="background-image:url({{ template_path }}/images/content/table-shadow-rm.gif);">
 									<div class="TableContentContainer">
 										<table class="TableContent" width="100%">
+											{% if not config.account_login_by_email or config.account_login_by_email_fallback %}
 											<tr style="background-color: {{ config.lightborder }};" >
 												<td class="LabelV" >Account {% if constant('USE_ACCOUNT_NAME') %}Name{% else %}Number{% endif %}:</td>
 												<td style="width:90%;" >{{ account }}</td>
 											</tr>
+											{% endif %}
 											<tr style="background-color: {{ config.darkborder }};" >
 												<td class="LabelV" >Email Address:</td>
 												<td style="width:90%;" >{{ account_email ~ email_change}}</td>

templates/tibiacom/basic.css

@@ -1489,6 +1489,25 @@ img {
   width: 135px;
   z-index: 20;
 }
+.BigButtonText {
+	position: absolute;
+	top: 0;
+	left: 0;
+	width: 135px;
+	height: 25px;
+	margin: 0;
+	padding: 0;
+	cursor: pointer;
+	background: 0 0;
+	border: none;
+	text-align: center;
+	color: #ffd18c;
+	font-family: Verdana,Arial,Times New Roman,sans-serif;
+	font-size: 12px;
+	font-weight: 400;
+	z-index: 20;
+	text-shadow: -1px -1px 0 #000,0 -1px 0 #000,1px -1px 0 #000,1px 0 0 #000,1px 1px 0 #000,0 1px 0 #000,-1px 1px 0 #000,-1px 0 0 #000
+}
 .TopButtonContainer {
   position: relative;
   right: 4px;

templates/tibiacom/buttons.base.html.twig

@@ -1,8 +1,8 @@
 {% spaceless %}
-<div class="BigButton" style="background-image:url({{ template_path }}/images/global/buttons/sbutton.gif)">
+<div class="BigButton" style="background-image:url({{ template_path }}/images/global/buttons/button_blue.gif)">
 	<div onMouseOver="MouseOverBigButton(this);" onMouseOut="MouseOutBigButton(this);">
-		<div class="BigButtonOver" style="background-image:url({{ template_path }}/images/global/buttons/sbutton_over.gif);" ></div>
+		<div class="BigButtonOver" style="background-image:url({{ template_path }}/images/global/buttons/{% if button_color is defined and button_color == 'green' %}button_green{% else %}button_blue_over{% endif %}.gif);" ></div>
-		<input class="ButtonText" type="image" name="{{ button_name }}" alt="{{ button_name }}" src="{{ template_path }}/images/global/buttons/{{ button_image }}.gif" />
+		<input class="BigButtonText" type="submit" value="{{ button_name }}">
 	</div>
 </div>
 {% endspaceless %}

templates/tibiacom/index.php

@@ -27,7 +27,7 @@ if(isset($config['boxes']))
 		var loginStatus="<?php echo ($logged ? 'true' : 'false'); ?>";
 		<?php
 			if(PAGE !== 'news') {
-				if(strpos(URI, 'subtopic=') !== false) {
+				if(isset($_REQUEST['subtopic'])) {
 					$tmp = $_REQUEST['subtopic'];
 					if($tmp === 'accountmanagement') {
 						$tmp = 'accountmanage';

tools/validate.php

@@ -27,15 +27,16 @@ if(isset($_GET['account']))
 		error_(Validator::getLastError());
 
 	$_account = new OTS_Account();
-	if(USE_ACCOUNT_NAME)
+	if(USE_ACCOUNT_NAME || USE_ACCOUNT_NUMBER)
 		$_account->find($account);
 	else
 		$_account->load($account);
 
+	$accountNameOrNumber = (USE_ACCOUNT_NAME ? ' name' : 'number');
 	if($_account->isLoaded())
-		error_('Account with this name already exist.');
+		error_("Account with this $accountNameOrNumber already exist.");
 
-	success_('Good account' . (USE_ACCOUNT_NAME ? ' name' : '') . ' ( ' . $account . ' ).');
+	success_("Good account $accountNameOrNumber ($account).");
 }
 else if(isset($_GET['email']))
 {