42 Commits

Author SHA1 Message Date
Ferywir d30bef0a40 security: harden signup username validation + fix reflected XSS (#184) (#187) 2026-06-09 14:57:56 +03:00
Catalin Novgorodschi 850a46ae2d Some fixes & improovements
1. Fix ban access, 2. Fix profile ('"") , 3. Add on vacation Admin/MH and exclude rat from reinforcement.
2026-05-15 12:13:01 +03:00
Catalin Novgorodschi a004f5352b For incremental refactor + some credits 2026-05-12 13:39:10 +03:00
Catalin Novgorodschi 27e9a9a7b5 Full refactor of Battle
Full refactor of Battle
2026-05-08 13:06:53 +03:00
Catalin Novgorodschi 544496c515 Update some shit code
Update some shit code
2026-04-30 14:24:31 +03:00
Catalin Novgorodschi 1ea6873826 Winner check on register
Winner check on register
2026-04-30 08:55:00 +03:00
Catalin Novgorodschi 3607a566f9 Add notice
Add notice
2026-04-28 10:19:50 +03:00
Catalin Novgorodschi e998dde06b Code requirements for vacation
Code requirements for vacation

Vacation function is fully functional
2026-04-27 13:26:39 +03:00
Catalin Novgorodschi 260896570e Revert "vulnerability fixed and cleanup and refactor"
This reverts commit 2a44e76414.
2026-02-11 15:22:16 +02:00
Catalin Novgorodschi 2a44e76414 vulnerability fixed and cleanup and refactor 2026-02-11 15:11:43 +02:00
iopietro 77136a9784 Artifacts update and optimizations
+Added the "Artifacts" section in the Admin Panel, which contains two
options: return a deleted artifact to the Natars and create new
Artifacts, assigned to a specified player
+Return to Natars coded, in the village section of the Admin Panel
+Moved a lot of functions and costants from Automation.php to the "new"
class Artifacts.php
+Optimized a lot the whole Natars creation process, decreased the number
of query of about 600
+Optimized a lot the function which deletes a player's account, it's now
executed almost instantly, even with players with a lot of villages
+Redesigned the map spawn system, using a more Travian-like village
distribution
+Fixed a bug that did show a broken village in the artifact chronology,
if that village was destroyed
+Reduced the amount of redundant code (about 230 lines) for
27_1.tpl/27_2.tpl and 27_3.tpl
+Fixed a bug that permitted to build the Great Granary and the Great
Warehouse in the whole account, with only a village effect artifact
+Fixed a bug in the Admin Panel map that didn't permit to show village
informations, if that village contained single quotes in its name
2018-07-24 03:04:25 +02:00
Vladyslav a956abee13 Change the date display
The date display was changed from 'm/d/Y' to 'd.m.Y'
2018-05-19 20:52:33 +03:00
iopietro de74f4a0cb Hotfixes
+Fixed a bug that didn't permit to send the welcome message (I hate
global variables...)
2018-05-10 17:52:22 +02:00
iopietro 90221cf19f Natars automation system
+Natars will now spawn automatically, you can set how many day should
pass before the spawn of Natars (and artifacts), WW Villages and WW
building plans (Note: WW villages and WW building plans won't spawn
until the creation of the natar account)
+Added 3 timers under the left menu which indicate the spawn of
Natars/Artifacts, WW villages and WW building plans
+Added an option in the installation, to set the resource production of
oasis
+Fixed a bug that didn't permit to add multiple Units, Abtech and tech
rows with one query
+Added a new information to the Artifact of the fool, the next effect
reroll will now be displayed in his informations (in the treasury)
+Fixed a bug that dind't permit the correct timers flow in Dorf3.php
(Warehouse tab), they'll now flow correctly
+Timers and resources percentage of villages with a negative production
of crop will now be marked in red (in the Warehouse tab, Dorf3.php) and
will now be displayed in how much time the granary will be emptied
+Fixed a possible bug that prevented to add raids to farm lists
+Fixed a bug that didn't permit to create WW Villages from the
Multihunter control panel
+Reworked all timers, there will be only one timer field now (in
Session.php)
+Minor bug fixing and optimization

NOTE: To play this version of the game, you need to reinstall the server
OR you can simply add these lines of code into your "config.php" file:

// ***** Natars Spawn Time
define("NATARS_SPAWN_TIME",260);
define("NATARS_WW_SPAWN_TIME",260);
define("NATARS_WW_BUILDING_PLAN_SPAWN_TIME",260);

// ***** Oasis production
define("OASIS_WOOD_MULTIPLIER",40);
define("OASIS_CLAY_MULTIPLIER",40);
define("OASIS_IRON_MULTIPLIER",40);
define("OASIS_CROP_MULTIPLIER",40);
define("OASIS_WOOD_PRODUCTION",OASIS_WOOD_MULTIPLIER*SPEED);
define("OASIS_CLAY_PRODUCTION",OASIS_CLAY_MULTIPLIER*SPEED);
define("OASIS_IRON_PRODUCTION",OASIS_IRON_MULTIPLIER*SPEED);
define("OASIS_CROP_PRODUCTION",OASIS_CROP_MULTIPLIER*SPEED);

P.S: from the next version, the possibility to add manual WWs, WW
building plans and to create the natar account will be REMOVED.
2018-05-10 17:45:27 +02:00
iopietro 9e44c1cd6d Some replacements
+Replaced all $GLOBALS['link'] with $database->dblink
-Removed Templates/links.tpl from build.php (it's already in
Templates/menu.tpl)
2018-04-08 19:55:28 +02:00
Martin Ambrus 50709a34f0 fix: wrong password verify check allows for any login 2017-12-01 19:55:24 +01:00
Martin Ambrus d3b51a34ec fix: disallow Natars user registration
#382
2017-11-26 16:56:29 +01:00
Martin Ambrus 0499d58862 fix: disable hack-registering as non-existing or NPC tribe 2017-11-24 10:24:41 +01:00
Martin Ambrus 53fa177671 fix: account activation issues
#344
2017-11-22 13:48:32 +01:00
Martin Ambrus 66132a7cdf refactor: Session.php only included once, login procedure optimization
#313
2017-11-20 00:39:37 +01:00
Martin Ambrus dab768f662 refactor: 1st round of database values caching 2017-11-15 16:01:00 +01:00
Martin Ambrus 57057384d3 refactor: SELECT * replaced by SELECT fieldname1, fieldname2 ...
So far in a few places.
2017-11-05 09:03:59 +01:00
Martin Ambrus 6f7c70a0d7 refactor: autoprefixing class includes 2017-10-28 02:17:43 +02:00
Martin Ambrus b5a0789ff2 fix: we could really use autoloader... later, later... 2017-10-25 18:17:46 +02:00
Martin Ambrus 30d3b9c4fa refactor: OOP code movements started :) 2017-10-25 13:38:38 +02:00
Martin Ambrus 11c4541f48 fix: registrations work again 2017-10-22 16:33:58 +02:00
Martin Ambrus 7270a69a63 fix: all location headers need to have exit after them! 2017-10-22 13:00:54 +02:00
Martin Ambrus f4021d1452 feat: MD5 passwords exchanged for bcrypt ones 2017-10-20 12:31:27 +02:00
Martin Ambrus 057f713528 fix: a LOT of manual typecastings for DB values that should be INTs 2017-10-18 00:33:03 +02:00
Martin Ambrus ac5d3538f8 fix: mysqli_error needs MySQLi connection as parameter 2017-10-17 13:05:13 +02:00
Martin Ambrus 80c70f0f13 fix: no double-escaping of SQL queries for login 2017-10-17 12:59:03 +02:00
Martin Ambrus 1654ce498f fix: security patching due to mysql injection vulnerabilities everywhere 2017-10-17 12:21:41 +02:00
evader1337 2d26af7c46 Trying to fix this monstrosity #2 2016-09-13 18:54:25 +02:00
Domen Kajdič 2cf2f3c343 Trying to fix this monstrosity #1 2016-09-13 15:38:14 +02:00
uroskn 1afde368d3 GameEngine and install folders have 777 already set by default 2016-07-02 21:39:28 +02:00
cosme12 f384cea18d SQL Injection fixed 2015-08-31 11:39:38 -03:00
Shadow ff5ca62a1e credits 2015-06-22 08:20:34 +03:00
Shadow e202a7e525 update 2014-03-12 09:06:46 +02:00
Shadow 60f8e330e7 Update Account.php 2013-12-05 07:39:32 +02:00
Shadow fd3a69273b Update Account.php 2013-11-08 09:52:01 +02:00
Shadowss 5d8937ad73 Fixed Registration hack 2013-11-01 07:56:21 +02:00
yi12345 98e94af807 finish hero_full.php 2013-06-16 10:38:34 +03:00