|
You last visited: Today at 13:23
Advertisement
[Release] Shaiya PHP website (CMS)
Discussion on [Release] Shaiya PHP website (CMS) within the Shaiya PServer Guides & Releases forum part of the Shaiya Private Server category.
10/27/2015, 22:04
|
#31
|
elite*gold: 0 
Join Date: Oct 2015
Posts: 23
Received Thanks: 7
|
Quote:
Originally Posted by Big_
i edited his login to be adapted to have MD5 Hash+Salt because thats how my users passwords are stored for in game it is verry easly done
|
Awesome, thank you! I wasn't sure if I was going to have to do this myself or not, hence the question. Thanks for the info!
|
|
|
|
11/02/2015, 21:27
|
#32
|
elite*gold: 0
Join Date: Jul 2009
Posts: 380
Received Thanks: 85
|
Hmm still no new releace =(
|
|
|
|
|
11/02/2015, 21:29
|
#33
|
elite*gold: 0
Join Date: Oct 2015
Posts: 23
Received Thanks: 7
|
Quote:
Originally Posted by Big_
Hmm still no new releace =(
|
When I got a new reply notification to this topic, I got really excited thinking the new version was out. **** you! 
In all seriousness, I can't wait for the next version either!
|
|
|
|
|
11/03/2015, 07:50
|
#34
|
elite*gold: 0
Join Date: Jul 2009
Posts: 380
Received Thanks: 85
|
yeah haha its a nice base to go from and can be customized verry easy i to and quite intested in the next releace here you go sugar here is the login.php that i edited to have MD5 user password and Salt
Code:
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<?php
include("../../config/config.php");
include("../../config/functions.php");
$supplied_username = isset($_POST["pseudo"]) ? mssql_escape_string(trim($_POST["pseudo"])) : '';
$supplied_password = isset($_POST["pass"]) ? mssql_escape_string(trim($_POST["pass"])) : '';
$checkremember = isset($_POST["remember_me"]) ? mssql_escape_string(trim($_POST["remember_me"])) : '';
$query_string = "SELECT * FROM PS_UserData.dbo.Users_Master WHERE UserID='$supplied_username'";
$result = odbc_exec($dbConn, $query_string);
// Odbc_num_row is counting table row
$count = odbc_num_rows($result);
// If result matched $myusername and $mypassword, table row must be 1 row
if ($count == 1) {
$row = odbc_fetch_row($result, 1);
$password = odbc_result($result, 'Pw');
$salt = odbc_result($result, 'salt');
// hashes stored in DB are uppercase, but md5 function returns lowercase :(
$encrypted_supplied_password = strtoupper(md5(strtoupper(md5($supplied_password) . md5($salt))));
if ($encrypted_supplied_password == $password) {
$UserUID = odbc_result($result, 'UserUID');
if ($checkremember == true){
// setcookie('legacy_autologin_usr',$supplied_username, time() + 3600 * 24 * 15);
// setcookie('legacy_autologin_pw', $supplied_password, time() + 3600 * 24 * 15);
// setcookie('legacy_autologin_uid', $UserUID, time() + 3600 * 24 * 15);
}
// data were valid, store the UserUID (his/her numerical unique ID)
session_start();
$_SESSION['UserUID'] = $UserUID;
$_SESSION['UserName'] = $supplied_username;
// update processing state
echo('
<div style="background-image:url(../../img/wow_prebc_17.png); background-repeat: no-repeat;">
<font color="green">Login Successful!</font>
<br/>
</div>'
);
}
else {
// Incorrect password
echo('
<div style="background-image:url(../../img/wow_prebc_17.png); background-repeat: no-repeat;">
<font color="red">
Incorrect Password!
<br/>
<br/>
<a href=#>Réinitialiser son mot de passe</a>
<br />
</font>
</div>
');
}
}
else {
// User not found
echo ('
<div style="background-image:url(../../img/wow_prebc_17.png); background-repeat: no-repeat;">
<font color="red">
UserName ' . $supplied_username . ' Not Found
</font>
</div>
');
}
?>
<div id="compteur"></div>
<script language="JavaScript">
function t () {
var compteur = document.getElementById('compteur');
s = duree;
m = 0;
h = 0;
if (s < 0) {
compteur.innerHTML=(document.location.href="../../?p=member");
}
else {
if (s > 59) {
m = Math.floor(s/60);
s = s - m * 60;
}
if (m > 59) {
h = Math.floor(m/60);
m = m - h * 60;
}
if (s < 10) {
s = "0" + s;
}
if (m < 10) {
m = "0" + m;
}
compteur.innerHTML = h + ":" + m + ":" + s;
}
duree = duree - 1;
window.setTimeout(t, 999);
}
duree="3";
t();
</script>
</body>
|
|
|
|
|
11/03/2015, 16:03
|
#35
|
elite*gold: 0
Join Date: Oct 2015
Posts: 23
Received Thanks: 7
|
Quote:
Originally Posted by Big_
yeah haha its a nice base to go from and can be customized verry easy i to and quite intested in the next releace here you go sugar here is the login.php that i edited to have MD5 user password and Salt
Code:
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<?php
include("../../config/config.php");
include("../../config/functions.php");
$supplied_username = isset($_POST["pseudo"]) ? mssql_escape_string(trim($_POST["pseudo"])) : '';
$supplied_password = isset($_POST["pass"]) ? mssql_escape_string(trim($_POST["pass"])) : '';
$checkremember = isset($_POST["remember_me"]) ? mssql_escape_string(trim($_POST["remember_me"])) : '';
$query_string = "SELECT * FROM PS_UserData.dbo.Users_Master WHERE UserID='$supplied_username'";
$result = odbc_exec($dbConn, $query_string);
// Odbc_num_row is counting table row
$count = odbc_num_rows($result);
// If result matched $myusername and $mypassword, table row must be 1 row
if ($count == 1) {
$row = odbc_fetch_row($result, 1);
$password = odbc_result($result, 'Pw');
$salt = odbc_result($result, 'salt');
// hashes stored in DB are uppercase, but md5 function returns lowercase :(
$encrypted_supplied_password = strtoupper(md5(strtoupper(md5($supplied_password) . md5($salt))));
if ($encrypted_supplied_password == $password) {
$UserUID = odbc_result($result, 'UserUID');
if ($checkremember == true){
// setcookie('legacy_autologin_usr',$supplied_username, time() + 3600 * 24 * 15);
// setcookie('legacy_autologin_pw', $supplied_password, time() + 3600 * 24 * 15);
// setcookie('legacy_autologin_uid', $UserUID, time() + 3600 * 24 * 15);
}
// data were valid, store the UserUID (his/her numerical unique ID)
session_start();
$_SESSION['UserUID'] = $UserUID;
$_SESSION['UserName'] = $supplied_username;
// update processing state
echo('
<div style="background-image:url(../../img/wow_prebc_17.png); background-repeat: no-repeat;">
<font color="green">Login Successful!</font>
<br/>
</div>'
);
}
else {
// Incorrect password
echo('
<div style="background-image:url(../../img/wow_prebc_17.png); background-repeat: no-repeat;">
<font color="red">
Incorrect Password!
<br/>
<br/>
<a href=#>Réinitialiser son mot de passe</a>
<br />
</font>
</div>
');
}
}
else {
// User not found
echo ('
<div style="background-image:url(../../img/wow_prebc_17.png); background-repeat: no-repeat;">
<font color="red">
UserName ' . $supplied_username . ' Not Found
</font>
</div>
');
}
?>
<div id="compteur"></div>
<script language="JavaScript">
function t () {
var compteur = document.getElementById('compteur');
s = duree;
m = 0;
h = 0;
if (s < 0) {
compteur.innerHTML=(document.location.href="../../?p=member");
}
else {
if (s > 59) {
m = Math.floor(s/60);
s = s - m * 60;
}
if (m > 59) {
h = Math.floor(m/60);
m = m - h * 60;
}
if (s < 10) {
s = "0" + s;
}
if (m < 10) {
m = "0" + m;
}
compteur.innerHTML = h + ":" + m + ":" + s;
}
duree = duree - 1;
window.setTimeout(t, 999);
}
duree="3";
t();
</script>
</body>
|
You rock! Thank you! I'll definitely be having fun playing with this code once 1.4.0 is out. Can never be too careful!
|
|
|
|
|
11/03/2015, 23:28
|
#36
|
elite*gold: 0
Join Date: Feb 2015
Posts: 473
Received Thanks: 1,108
|
I almost finished 1.4,
I'll upload it this week. also Thank you Big_ 
|
|
|
|
|
11/04/2015, 00:55
|
#37
|
elite*gold: 0
Join Date: Oct 2015
Posts: 23
Received Thanks: 7
|
Awesome news! Can't wait!
|
|
|
|
|
11/08/2015, 22:46
|
#38
|
elite*gold: 0
Join Date: Feb 2013
Posts: 99
Received Thanks: 7
|
I would also suggest that you look into your SQL Injection protection in your functions.php as you use the ODBC drivers to connect to your database tables, so I am having an issue understanding why you're trying to use mssql_escape_string to secure your text input from form fields when them mssql drivers don't seem to be called anywhere.
From what I can tell, there's a bunch of stuff that's just thrown together, and although the overall design is nice, it still has a lot of updating that needs to be done before I'd consider it being a safe release. At this time, the SQL Injection prevention does not work, and wouldn't recommend using this template until the bugs are fixed.
~[Dev]Ash Artanis | Nexus Development Foundation
|
|
|
|
|
11/11/2015, 21:09
|
#39
|
elite*gold: 0
Join Date: Feb 2015
Posts: 473
Received Thanks: 1,108
|
Version 1.4.0 Removed!
Version 1.4.1 Uploaded 
|
|
|
|
|
11/12/2015, 00:12
|
#40
|
elite*gold: 0
Join Date: Oct 2015
Posts: 23
Received Thanks: 7
|
I seem to be getting errors trying to run "Procedure1.sql" and "Procedure2.sql". Are these still required, or were they accidentally carried over from an older version? If they are required, is there a specific database they need to be run under? I cannot find "dbo.usp_Read_Chars_Detail2_R" in any of them, hence my issue.
Edit: Disregard that. I found the issue! Seems my "PS_GameData" database was just being a pain.
____________________________
Also, "dbo.Users_Master.sql" contains a couple typos.
Code:
ALTER TABLE [PS_UserData].[dbo.].[Users_Master]
ADD GM tinyint,
GS tinyiny,
MainCharName varchar(50)
Should be:
Code:
ALTER TABLE [PS_UserData].[dbo].[Users_Master]
ADD GM tinyint,
GS tinyint,
MainCharName varchar(50)
Hope this helps!
Edit #2: I noticed this was missing from the instructions, but "<root>/<Language Version>/script/VoteHTTP_REFERER/db.php" also needs to have its database details changed, else the page returns an error about being unable to connect to the database.
Edit #3: "<root>/<Language Version>/script/Bless_odbc/bless.php" has a small typo on line 29.
Code:
<td style=\"width:340px;height:6px;\"><img src=\"../../img/bless//light.png\" style=\"width:".$row['GodBless_Light']."px; height:8px;\" /></td><div class='spacer'></div><td align='right' style=\"width:340px;height:6px;\"><img src=\"../../img/bless//dark.png\" style=\"width:".$row['GodBless_Dark']."px;height:9px;\" />
Should be:
Code:
<td style=\"width:340px;height:6px;\"><img src=\"../../img/bless/light.png\" style=\"width:".$row['GodBless_Light']."px; height:8px;\" /></td><div class='spacer'></div><td align='right' style=\"width:340px;height:6px;\"><img src=\"../../img/bless/dark.png\" style=\"width:".$row['GodBless_Dark']."px;height:9px;\" />
(The images contain extra forward slashes in their URL's)
____________________________
Loving your work man! Keep it up 
|
|
|
|
|
11/12/2015, 02:28
|
#41
|
elite*gold: 0
Join Date: Jul 2009
Posts: 380
Received Thanks: 85
|
i just checked the FR version looks fine then you go to the US Version and there is missing stuff just heads up
|
|
|
|
|
11/12/2015, 02:31
|
#42
|
elite*gold: 0
Join Date: Oct 2015
Posts: 23
Received Thanks: 7
|
Quote:
Originally Posted by Big_
i just checked the FR version looks fine then you go to the US Version and there is missing stuff just heads up
|
What is missing?
|
|
|
|
|
11/12/2015, 03:35
|
#43
|
elite*gold: 0
Join Date: Jul 2009
Posts: 380
Received Thanks: 85
|
well i only have quick look but the right and left panel was in not correct places and the midle news/main content box is not there but on the FR its fine
|
|
|
|
|
11/12/2015, 08:55
|
#44
|
elite*gold: 0
Join Date: Apr 2015
Posts: 424
Received Thanks: 113
|
@sugar I think us version isn't fully completed bc trayne work on french version
|
|
|
|
|
11/12/2015, 17:29
|
#45
|
elite*gold: 0
Join Date: Oct 2015
Posts: 23
Received Thanks: 7
|
Quote:
Originally Posted by Big_
well i only have quick look but the right and left panel was in not correct places and the midle news/main content box is not there but on the FR its fine
|
I don't seem to have that issue with mine. Did you change anything in it, or try to upgrade on top of an older version? Mine was a clean install in an empty directory.
Quote:
Originally Posted by SkuulCandy
@sugar I think us version isn't fully completed bc trayne work on french version
|
The bugs I found were version-independent, with the exception of the image paths containing double-slashes in the English version, although that was probably carried over from another language version anyway. It seems most of the bugs are either small accidental typos, or bugs in existing scripts that he used from this website that the original authors never fixed, which is not his fault.
__________________________
As a side note, I would recommend in future releases to go through the various scripts' database configurations, and update them to read from your main configuration file using a variable or similar method. That way users only have to set the details once, rather than a dozen different times. Other than the bugs I mentioned previously, this is an epic release, and I absolutely love it. Awesome work man!
|
|
|
|
Similar Threads
|
[RELEASE]Shaiya Aeria Games Website
10/08/2021 - Shaiya PServer Guides & Releases - 22 Replies
Good Day Gays :D!!
As i notice so many PS now trying to use the new Aeria game website but not full and here today ill gonna share this one and i hope this one will help
https://mega.co.nz/#!15NGxAKY!A2BQocAalUW09YIo_5O HvGDio3KzlsfEhIsvIoFi7YE
|
All times are GMT +1. The time now is 13:25.
|
|
![[Release] Shaiya PHP website (CMS)](https://www.elitepvpers.com/forum/iconimages/shaiya-pserver-guides-releases/release-shaiya-php-website-cms_ltr.gif){kind=small}
