[Collection Thread] Private Server Info and Support Thread

[UND3RW0RLD]

Originally Posted by lCulito

really, this don't work xD need check validation $_GET['factionId'], can't enter if var isn't number. 1 or 2 or 3

sorry, i have bad english xD

this is only 50% right. it can be 1 or 2 or something else.
1 = mmo, 2 = eic, ? = vru.
You can put the request "on hold" replace 3 with anything else like "fhafauk32592398hfak"
but in the end it will still counts for VRU ^^

Originally Posted by manulaiko3.0

Maybe you need to learn SQL

see init.php

PHP Code:

$_GET = str_replace(['<', '>', '\'', '\'', '\\'], ['<', '>', '"', ''', '\'], $_GET); 


without single quote ' you can't inject
every try to inject something will result in a syntax error, so the sql wont get executed

but additionally i would suggest to add another test.. *e* in fact it is a cast.. just to be 200% sure

replace

PHP Code:

        if (isset($_GET['subaction'], $_GET['factionID']) && $_GET['subaction'] === 'factionChoose' && $_GET['factionID'] > 0 && $_GET['factionID'] < 4):
            $mapId = 1;
            if ($_GET['factionID'] === 1) {
                $mapId = 1;
                $x = 1000;
                $y = 1000;
            } elseif ($_GET['factionID'] === 2) {
                $mapId = 5;
                $x = 19800;
                $y = 1000;
            } else {
                $mapId = 9;
                $x = 19600;
                $y = 11900;
            };
            $MySQLi->query('UPDATE server_1_players SET factionId = ' . $_GET['factionID'] . ', mapId = ' . $mapId . ', x = ' . $x . ', y = ' . $y . ' WHERE playerID = ' . $Users->DataRow['playerID']);

            echo 'indexInternal.es.php?action=internalStart';
            exit;
        endif; 


with

PHP Code:

        if (isset($_GET['subaction'], $_GET['factionID']) && $_GET['subaction'] === 'factionChoose' && $_GET['factionID'] > 0 && $_GET['factionID'] < 4):
            $faID = (int) ($_GET['factionID'] >= 4) ? 3 : $_GET['factionID'];
            $mapId = 1;
            if ($faID === '1') {
                $mapId = 1;
                $x = 1000;
                $y = 1000;
            } elseif ($faID === '2') {
                $mapId = 5;
                $x = 19800;
                $y = 1000;
            } else {
                $mapId = 9;
                $x = 19600;
                $y = 11900;
            };
            $MySQLi->query('UPDATE server_1_players SET factionId = ' . $faID . ', mapId = ' . $mapId . ', x = ' . $x . ', y = ' . $y . ' WHERE playerID = ' . $Users->DataRow['playerID']);

            echo 'indexInternal.es.php?action=internalStart';
            exit;
        endif; 


PS it's untested

[Destiny]

who can help fix my udobot for my server

[Turkic]

friends please answer my not work chat my emulator darkplanet please helpp chat not work ((

[bobn171]

EDIT: nothing to read xD

[Turkic]

Hey my server not working ranking? why? my emulator dark planet emulators.

[cryz35]

This took me a lot but finally realised it was a connection problem -.-

Worth it too much fun to spin those drones xD

[fushi23]

Hey i have question, how to add wheels on rank ?

[manulaiko3.0]

Originally Posted by fushi23

Hey i have question, how to add wheels on rank ?

Wheels? Well, last time it was apples...

If you mean scroll bars it's a jQuery script, look at something that has scrollbars (news for example) and learn how they work

[fushi23]

I'm talking about:

[UND3RW0RLD]

This is called: GG-Rewards, Rings, GG-Rings...

It's an emulator-part. Send the right packet. The logic tells me, it depends to the user-login-packet. try to modify that.

[Turkic]

hey darkplanets files ammonation problem have not buy why?

[UND3RW0RLD]

check the queries.. c'mon.. I released that files to help CODERS.. There are ALOT of references..

example (from daily-login-class)

PHP Code:

    if ($qry->execute()) {
        if($qry->rowCount () != 0) {
            $sql = "UPDATE server_1_player_ammunation SET " . $btype['loot'][$i] . " = " . $btype['loot'][$i] . " + :count WHERE playerID = :uID";
            $qry = $this->con->prepare($sql);
            $qry->bindParam(':uID', $this->uid, PDO::PARAM_INT);
            $qry->bindParam(':count', $btype['count'][$i], PDO::PARAM_INT);
            //$qry->bindParam(':type', $btype['loot'][$i], PDO::PARAM_STR);
            $qry->execute();
        } else {
            //storing in old system
            $qry = $this->con->prepare("INSERT INTO server_1_player_all_items (`lootid`, `Q`, `properties`, `interactive`, `playerID`, `userID`) VALUES (:type, :count, '0', 0, :uID, :uID)");
            $qry->bindParam(':uID', $this->uid, PDO::PARAM_INT);
            $qry->bindParam(':count', $btype['count'][$i], PDO::PARAM_INT);
            $qry->bindParam(':type', $btype['loot'][$i], PDO::PARAM_STR);
            $qry->execute();
        }
    } 


you have to convert EVERY SINGLE QUERY to the new system..

[manulaiko3.0]

Originally Posted by UND3RW0RLD

check the queries.. c'mon.. I released that files to help CODERS.. There are ALOT of references..

example (from daily-login-class)

PHP Code:

    if ($qry->execute()) {
        if($qry->rowCount () != 0) {
            $sql = "UPDATE server_1_player_ammunation SET " . $btype['loot'][$i] . " = " . $btype['loot'][$i] . " + :count WHERE playerID = :uID";
            $qry = $this->con->prepare($sql);
            $qry->bindParam(':uID', $this->uid, PDO::PARAM_INT);
            $qry->bindParam(':count', $btype['count'][$i], PDO::PARAM_INT);
            //$qry->bindParam(':type', $btype['loot'][$i], PDO::PARAM_STR);
            $qry->execute();
        } else {
            //storing in old system
            $qry = $this->con->prepare("INSERT INTO server_1_player_all_items (`lootid`, `Q`, `properties`, `interactive`, `playerID`, `userID`) VALUES (:type, :count, '0', 0, :uID, :uID)");
            $qry->bindParam(':uID', $this->uid, PDO::PARAM_INT);
            $qry->bindParam(':count', $btype['count'][$i], PDO::PARAM_INT);
            $qry->bindParam(':type', $btype['loot'][$i], PDO::PARAM_STR);
            $qry->execute();
        }
    } 


you have to convert EVERY SINGLE QUERY to the new system..

My custom database class can do that in 3 - 4 lines

[UND3RW0RLD]

Originally Posted by manulaiko3.0

My custom database class can do that in 3 - 4 lines

You may have a good class but you need atleast

PHP Code:

    $qry = $this->con->prepare("SELECT * FROM server_1_player_ammunation WHERE playerID = :uID");
    //..
    if ($qry->execute()) {
        if($qry->rowCount () != 0) {
          //..
        } else {
          //..
        }
    } 


This was needed because we had old accounts without ammunition-rows. New server have only new accounts so it can be reworked. I were looking for a good example between the general equipment and the ammonation-rows for the client.

[manulaiko3.0]

Originally Posted by UND3RW0RLD

You may have a good class but you need atleast

PHP Code:

    $qry = $this->con->prepare("SELECT * FROM server_1_player_ammunation WHERE playerID = :uID");
    //..
    if ($qry->execute()) {
        if($qry->rowCount () != 0) {
          //..
        } else {
          //..
        }
    } 


This was needed because we had old accounts without ammunition-rows. New server have only new accounts so it can be reworked. I were looking for a good example between the general equipment and the ammonation-rows for the client.

The same example with my Database class:

PHP Code:

$rows = $Database->get("server_1_player_ammunation", "WHERE playerID=".$Users->get("playerID"));
foreach($rows as $row) {
          //Do the shit you want
}