Shakes & Fidget Server - Code & Anleitung

[UND3RW0RLD]

Originally Posted by Rigaer

You should never disable error reporting on PHP, errors are something that needs to be fixed not something that should be hidden.


I will give you a little info for the visual bug

PHP Code:

$GLOBALS ["ret"] [286] = "786434"; 


That piece of code changes the mount of the character and also changes the current tower visual level... you just need to understand the logic of it

to the first: yes for development it should be on, but on production (live) it should be off to avoid leaking of data..


why telling me?
i already fixed it..

PHP Code:

$GLOBALS ['ret'] [286] = ($db_data ['tower_level'] - 1) * 65536 + $db_data['mount']; 


edit:
btw. It's not very productive to say: i did this and that, but not sharing it

[Rigaer]

Originally Posted by ǝnd1ǝss-ɯonǝʎ

to the first: yes for development it should be on, but on production (live) it should be off to avoid leaking of data..


why telling me?
i already fixed it..

PHP Code:

$GLOBALS ['ret'] [286] = ($db_data ['tower_level'] - 1) * 65536 + $db_data['mount']; 


edit:
btw. It's not very productive to say: i did this and that, but not sharing it

You did not fix it, * 65536 is still a number that have a use inside the game,,,
but thats a nice hotfix gj ;d

I was not telling everything beacuse im not 100% sure im doing it the correct way so yeah.

[UND3RW0RLD]

Maybe I'll find a proper solution in future.. or someone else.. we will see

What about the guild-attacks and tower-helper.. or multi-user battles in general.. how is that working..?

[Rigaer]

Originally Posted by ǝnd1ǝss-ɯonǝʎ

What about the guild-attacks and tower-helper.. or multi-user battles in general.. how is that working..?

Well for guild attacks I left it since I want to finish first tower with helpers, for guild attacks you basically need to send all the guild data and members with damage done on the fight to the ret array...

for tower helpers you need to send the response 321 with 3 battle logs, one your 1 helper vs the monster, send damage done, turns items... I dont have it finished 100% (some bugs like showing evaded attack isntead of damage done,..)

PHP Code:

$ret [0] = "3212300160";
$ret [1] = "6338";
$ret [2] = "1456";
$ret [3] = "1424";
$ret [4] = "2396";
$ret [5] = "2015";
$ret [6] = "20524500";
$ret [7] = "4771";
$ret [8] = "1898";
$ret [9] = "1869";
$ret [10] = "4561";
$ret [11] = "2991;2259878";
$ret [12] = "0";
$ret [13] = "0";
$ret [14] = "20524500";
$ret [15] = "40282";
$ret [16] = "0";
$ret [17] = "2185388";
$ret [18] = "273504";
$ret [19] = "3";
$ret [20] = "20250996";
$ret [21] = "74490";
$ret [22] = "0";
$ret [23] = "2103301";
$ret [24] = "183460";
$ret [25] = "0";
... 


Thats a test I made the list goes till [900] so yeah... on the request.php theres a sample code

PHP Code:

// STRUCTURE
        //$ret [0] = '3215216960/7103/1791/1770/4384/3909/25172784/2473/5947/2464/5763/3930;4655420/0/0/25172784/561540/3/4405539/0/2/25172784/249880/0/4153589/0/2/25172784/251950/0/3787388/936784/3/24236000/366200/0/2288974/1346645/3/22889354/1498414/3/1706694/765428/0/22123926/582280/0/151549/883898/0/21240028/1555145/3/-661731/1047733/0/20192294/813280/0/;' . $db_data ['user_name'] . '/237/0/0/1/-391/0/0/0/0/0/0/0/0/0/37/272/0/0/3/-436/0/0/0/0/0/0/0/0/0;1/57/458/646/1/4/5/328/328/328/0/0/1/2003/455/909/0/0/0/0/0/0/0/0;0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0;2;0;0;0;-1;;36;37§-1/2/3/' . $db_data ['user_name'] . '///-1/////§1191428/1528/1511/6632/2503/3746/25172784/2473/5947/2464/5763/3930;695733/0/0/20192294/495694/0/25093/1744524/3/18447770/670640/0/-946245/2487723/3/15960047/971338/3/;' . $db_data ['user_name'] . '/237/0/0/2/-392/0/0/0/0/0/0/0/0/0/37/272/0/0/3/-436/0/0/0/0/0/0/0/0/0;1/1009/819/1467/3/1/2/986/0/0/22997039/0/1/2003/455/909/0/0/0/0/0/0/0/0;0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0;2;0;0;0;-1;;36;37§-1/3/' . $db_data ['user_name'] . '////20192294/////§4363968/1528/6323/1508/4584/3565/25172784/2473/5947/2464/5763/3930;4128753/357705/3/15602342/235215/0/4128753/0/2/15602342/0/2/3783833/296818/0/15305524/344920/0/3783833/0/2/15305524/0/2/3783833/0/2/15305524/0/2/3144072/427037/0/14878487/639761/3/2733022/0/2/14878487/411049/0/2733022/0/2/14878487/0/2/2222398/0/2/14878487/510624/0/1531360/609312/0/14269175/691038/0/1531360/0/2/14269175/0/2/232841/0/2/14269175/1298519/3/232841/787640/0/13481535/0/2/232841/864448/0/12617087/0/2/232841/0/2/12617087/0/2/-1730563/1884610/3/10732477/1963404/3/;' . $db_data ['user_name'] . '/237/0/0/3/-393/0/0/0/0/0/0/0/0/0/37/272/0/0/3/-436/0/0/0/0/0/0/0/0/0;1/2056/600/644/2/4/5/588/588/588/0/0/1/2003/455/909/0/0/0/0/0/0/0/0;0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0;2;0;0;0;-1;;36;37§-1/' . $db_data ['user_name'] . '/////15960047/////§1082424/961/1005/6661/2274/2125/25172784/2473/5947/2464/5763/3930;166101/1403916/3/9328561/916323/3/-632401/995043/0/8333517/798503/0/;' . $db_data ['user_name'] . '/237/1/1/2/2/103/102/2/109/3/2/15/1/0/37/272/0/0/3/-436/0/0/0/0/0/0/0/0/0;1/1009/1046/1410/3/4/5/1064/0/0/18758009/0/1/2003/455/909/0/0/0/0/0/0/0/0;0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0/0;2;0;0;0;-1;;36;37§-1//////10732477/////§;0;-1;0;0;0§1264302793/92087/1397866973/1301994663/841267025/22/0/237/111298869/123996780/96905/933/-1/65338476/0/1338/1324/2/103/102/2/109/3/2/15/1/0/1/257/2/961/804/1950/1791/1700/0/201/4711/483/425/870/709/1848/1697/1602/0/1/0/1023410182/656368/443/0/3/4/2/492/0/0/11048178/0/3/1008/783/0/3/2/1/539/0/0/17891075/0/855638021/66546/532/0/3/4/5/532/0/0/9488487/0/687865860/1967089/437/0/3/2/1/500/0/0/6277787/0/1358954504/655369/0/0/3/1/5/528/0/0/7667088/0/1191182343/66544/622/0/3/2/4/512/0/0/8327251/0/1526726665/655368/0/0/4/1/5/483/0/0/0/0/1694498826/1310746/0/0/3/2/1/544/0/0/8864890/0/184549377/328689/1046/1410/3/4/5/1064/0/0/18758009/0/0/0/0/0/0/0/0/0/0/0/0/0/8/19/0/0/1/5/3/571/0/0/29292628/0/0/1008/532/0/4/3/1/548/0/0/0/0/0/2010/2154/0/1/2/3/295/269/0/0/0/0/15/0/0/11/5/0/72/25/0/1852482/0/0/1/0/0/1/5/3/304/248/0/0/0/0/237/237/237/5/4/1/-90/-93/-80/17/8/2/720/720/960/0/1010/718/0/4/1/5/295/269/0/27657353/0/0/1008/743/0/4/3/2/332/242/0/30570794/0/0/19/0/0/1/5/3/571/0/0/29292628/0/234800/839600/340000/28276200/10709600/34308500/2359298/1397782503/5/1008/579/0/3/1/5/552/0/0/40004185/0/3/1009/676/0/4/5/3/283/283/0/52922554/10/5/1009/411/0/5/4/2/289/267/0/55685219/10/5/1008/827/0/1/2/4/316/260/0/41133282/1/1/1008/809/1739/2/5/4/1120/0/0/99431632/0/1/1009/1160/1378/1/3/5/634/458/0/158498908/10/1397782757/8/7/0/0/1/3/2/342/224/0/21909165/10/12/16/0/0/11/12/0/168/25/0/3087470/15/9/5/0/0/5/4/2/557/0/0/39474100/0/8/5/0/0/1/4/2/340/224/0/10585665/1/9/14/0/0/1/5/3/350/218/0/12332167/1/8/12/0/0/4/3/5/552/0/0/37778355/0/37/0/829/3/272/10968/921711/1357235982/12/10/1391589443/0/0/1/2817/1046/1410/0/1398880351/3/0/0/1397866956/6000/0/100/1397870573/1397859709/146/146/1/1356631675/237/100/5192/9239/8082/1000000000/102529/2/1362/83/0/0/4/1397866973/5/12/12/12/12/12/12/12/12/12/12/120/16/485/15/12/0/1398042462/1398040963/0/25/25/0/0/304900910/304900910/304900910/1/1368876356/0/1596/1397866973';
        //break; 


Explode that array / and send it

[TheCry]

Originally Posted by ǝnd1ǝss-ɯonǝʎ

to the first: yes for development it should be on, but on production (live) it should be off to avoid leaking of data..


why telling me?
i already fixed it..

PHP Code:

$GLOBALS ['ret'] [286] = ($db_data ['tower_level'] - 1) * 65536 + $db_data['mount']; 


edit:
btw. It's not very productive to say: i did this and that, but not sharing it

Its working only visual... fight not working
But gj

[eskocze]

Jessi or Anywho.. can me help ? i have black screen.. yes.. in req.php i have my database..
the game read from db only i have blackscreen.. :/

yes .. i have res from crasim...

[UND3RW0RLD]

checked index.php?

[petyanbi4]

hello! how to fix guild donate function? system get my shrooms and silver, but doesnt insert them into guild.

[UND3RW0RLD]

refresh guildpage

[petyanbi4]

maybe smth wrong in my database? silver and mushrooms didnt appear in rows in database, but they disappear from my in-game wallet ))

[UND3RW0RLD]

There is no problem with the source.

[G.Poison]

Eine Merged-Version von mir und endless wird momentan auf

getestet!

Die Runden starten alle 12 h neu!
Ergebnisse werden in der Hall of Fame auf der Startseite gespeichert!


Nutze deine Chance,
und erkämpfe dir einen Rang in unserer Hall of Fame.

[Heroic9614]

ǝnd1ǝss-ɯonǝʎ Do you happen to be fixed in that% u0171 such as ű do not write the text for special characters in place of

[petyanbi4]

I find the bug: if your level is <100 you can donate to guild bank, but values doesnt save.
I set GUILD_S_MINLEVEL=1 for fix.

[UND3RW0RLD]

Originally Posted by Heroic9614

ǝnd1ǝss-ɯonǝʎ Do you happen to be fixed in that% u0171 such as ű do not write the text for special characters in place of

PHP Code:

$zeichen[] = "--";
$zeichen[] = "*";
$zeichen[] = "+";
$zeichen[] = '"';
$zeichen[] = "'";
$zeichen[] = '\''; 


Are not allowed sign to avoid injections.

Also not allowed are the following in requests (get, post)

PHP Code:

'chr(', 'chr=', 'chr%20', '%20chr', 'wget%20', '%20wget', 'wget(',
              'cmd=', '%20cmd', 'cmd%20', 'rush=', '%20rush', 'rush%20',
                   'union%20', '%20union', 'union(', 'union=', 'echr(', '%20echr', 'echr%20', 'echr=',
                   'esystem(', 'esystem%20', 'cp%20', '%20cp', 'cp(', 'mdir%20', '%20mdir', 'mdir(',
                   'mcd%20', 'mrd%20', 'rm%20', '%20mcd', '%20mrd', '%20rm',
                   'mcd(', 'mrd(', 'rm(', 'mcd=', 'mrd=', 'mv%20', 'rmdir%20', 'mv(', 'rmdir(',
                   'chmod(', 'chmod%20', '%20chmod', 'chmod(', 'chmod=', 'chown%20', 'chgrp%20', 'chown(', 'chgrp(',
                   'locate%20', 'grep%20', 'locate(', 'grep(', 'diff%20', 'kill%20', 'kill(', 'killall',
                   'passwd%20', '%20passwd', 'passwd(', 'telnet%20', 'vi(', 'vi%20',
                   'insert%20into', 'select%20', 'nigga(', '%20nigga', 'nigga%20', 'fopen', 'fwrite', '%20like', 'like%20',
                   '$_request', '$_get', '$request', '$get', '.system', 'HTTP_PHP', '&aim', '%20getenv', 'getenv%20',
                   'new_password', '&icq','/etc/password','/etc/shadow', '/etc/groups', '/etc/gshadow',
                   'HTTP_USER_AGENT', 'HTTP_HOST', '/bin/ps', 'wget%20', 'uname\x20-a', '/usr/bin/id',
                   '/bin/echo', '/bin/kill', '/bin/', '/chgrp', '/chown', '/usr/bin', 'g\+\+', 'bin/python',
                   'bin/tclsh', 'bin/nasm', 'perl%20', 'traceroute%20', 'ping%20', '.pl', '/usr/X11R6/bin/xterm', 'lsof%20',
                   '/bin/mail', '.conf', 'motd%20', 'HTTP/1.', '.inc.php', 'config.php', 'cgi-', '.eml',
                   'file\://', 'window.open', '<SCRIPT>', 'javascript\://','img src', 'img%20src','.jsp','ftp.exe',
                   'xp_enumdsn', 'xp_availablemedia', 'xp_filelist', 'xp_cmdshell', 'nc.exe', '.htpasswd',
                   'servlet', '/etc/passwd', 'wwwacl', '~root', '~ftp', '.js', '.jsp', 'admin_', '.history',
                   'bash_history', '.bash_history', '~nobody', 'server-info', 'server-status', 'reboot%20', 'halt%20',
                   'powerdown%20', '/home/ftp', '/home/www', 'secure_site, ok', 'chunked', 'org.apache', '/servlet/con',
                   '<script', '/robot.txt' ,'/perl' ,'mod_gzip_status', 'db_mysql.inc', '.inc', 'select%20from',
                   'select from', 'drop%20', '.system', 'getenv', 'http_', '_php', 'php_', 'phpinfo()', '<?php', '?>', 'sql=',
                   '$mysql_', 'java script:'

Originally Posted by petyanbi4

I find the bug: if your level is <100 you can donate to guild bank, but values doesnt save.
I set GUILD_S_MINLEVEL=1 for fix.

It's not a bug, it's a feature to avoid spam-accounts!

btw. you don't have to do it via database..

here the regular way:






YOU ALSO NEED TO CHANGE THE LANGUAGEFILES!!