xinyin025/TravianZ
1
0
Fork 0
mirror of https://github.com/Shadowss/TravianZ.git synced 2026-09-20 17:06:37 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: security patching due to mysql injection vulnerabilities everywhere

Browse Source
This commit is contained in:
Martin Ambrus
2017-10-17 12:21:41 +02:00
parent 74cccb2a74
commit 1654ce498f
10 changed files with 694 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
todo.txt
+5 -1
View File
@@ -14,4 +14,8 @@
- disallow installation if existing data are in place, or world map would end up screwed and villages not showing (because there can be multiple villages/oasis generated for one square then)
- when editing Additional Information for user and adjusting gold, sometimes the first time will not record the new gold amount
- update password hashes (I believe they are md5 only now)
- make mass messages work with apostrophes and quotes
- allow to redirect Support messages to admin's nickname (for when there's only a single admin and doesn't like switching between Support and themselves)
- disallow Support to play (single cookie for Admin and the game means support gets no village and lots of warnings when they switch to game now)
- make messages work with apostrophes
- resetting res bonus in admin actually says that bonus was given after OK is pressed
- pagination in attacks goes to "All" reports instead of staying in "Attacks"