Commit Graph

3222 Commits

Author SHA1 Message Date
Ferywir 6888a09b5f fix(admin): let editPlus subtract Plus/bonus days as the form advertises (#254) 2026-06-22 18:41:28 +03:00
Ferywir 6e79c47951 fix(admin): verify CSRF token in Plus/Gold admin Mods [#139] (#253) 2026-06-22 18:40:43 +03:00
Ferywir 9d2d7699a9 fix(profile): neutralize stored XSS in profile descriptions [#250] (#252) 2026-06-22 16:31:20 +03:00
novgorodschi catalin 4b208dbfd8 Fix some things
Fix some things
2026-06-22 15:19:05 +03:00
Ferywir 228397d011 feature(rally-point): bold the "?" for incoming stacks below rally point level [#249] (#251)
On the rally point incoming tab, the number of an incoming unit type is never
revealed: it is always shown as a "?". When that stack is smaller than the
defender's rally point (gid 16) level, the "?" is rendered in solid black
bold, matching original Travian behaviour (e.g. rally point level 20 and an
incoming 19 praetorians shows a bold "?"). The eyesight artifact still reveals
which troop types are present (0 for the absent ones). Scope: village
attacks/raids only.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-22 13:40:59 +03:00
novgorodschi catalin 66c966cb5e New General Statistics
New General Statistics. Please help me with translate @Ferywir
2026-06-22 13:40:21 +03:00
novgorodschi catalin b9d36ba311 Fix also in admin panel removexss
Fix also in admin panel removexss
2026-06-22 12:40:07 +03:00
novgorodschi catalin c250a19f5a Fix #250
Fix #250
2026-06-22 12:34:31 +03:00
novgorodschi catalin 561933b23b Fix fLevel
Fix fLevel
2026-06-22 11:42:44 +03:00
novgorodschi catalin 41e0fd6313 Some fix
Some fix
2026-06-22 10:41:25 +03:00
novgorodschi catalin 337c94b981 Fix Admin Panel view & some PHP 8.1+
Fix Admin Panel view & some PHP 8.1+
2026-06-22 09:20:16 +03:00
Ferywir f581add125 feature(rally-point): mark incoming attacks + show per-troop travel time [#245] (#248) 2026-06-22 06:54:41 +03:00
Ferywir afbba3f841 fix(reports): pass aid on vilview report links so ally reports open [#246] (#247) 2026-06-21 21:04:56 +03:00
Catalin Novgorodschi e43dfdd410 Update README.md 2026-06-21 11:25:26 +03:00
Catalin Novgorodschi 3cf4530db6 Update README.md
Update readme
2026-06-20 21:00:31 +03:00
Ferywir b7e943ea90 fix(admin): wire CSRF token into admin.php-routed forms [#139] (#244) 2026-06-20 06:44:12 +03:00
Ferywir 1ce1003153 fix(chat): stop echoing the raw INSERT query in add_data() [#139] (#243) 2026-06-19 13:31:21 +03:00
Ferywir b0e6680705 fix(chat): replace eval() of server output with JSON.parse() [#139] (#242) 2026-06-19 13:30:54 +03:00
Ferywir 1a797bab80 fix(admin): prevent SQL injection in editAccess Mod [#139] (#241) 2026-06-19 13:30:25 +03:00
Ferywir 9c726a05b9 fix(admin): re-check admin rank in addUsers Mod (defense-in-depth) [#139] (#240) 2026-06-18 19:09:02 +03:00
Ferywir 1b978470c6 fix(session): refresh the 30s user-cache after a player's own changes (#239) 2026-06-18 14:59:44 +03:00
Ferywir cdc736839e i18n(alliance): render alliance news-feed notices in each reader's language (EN/FR/RO) (#238) 2026-06-18 10:22:15 +03:00
Ferywir d008261678 i18n: render system in-game messages in each reader's language (EN/FR/RO) (#237) 2026-06-17 18:19:24 +03:00
Ferywir 51c9cc5b2c i18n: render battle reports in each reader's language (EN/FR/RO) (#236) 2026-06-17 16:24:37 +03:00
Catalin Novgorodschi abe36748d7 Clea Automation.php
Clean unused code
2026-06-17 08:56:34 +03:00
Ferywir 0b1bd44d22 Perf: cache zero building levels in getFieldLevelInVillage [#155] (#235) 2026-06-16 18:22:10 +03:00
Ferywir b7feb7f2a1 Perf(sendunitsComplete): batch-preload getMInfo in preloadBattleData [#155] (#234) 2026-06-16 16:53:51 +03:00
Ferywir 3cdc6a6920 Refactor(sendunitsComplete): extract handleVillageDestruction() [#155] (#233) 2026-06-16 13:26:51 +03:00
Ferywir b3e49a6ecf Refactor(sendunitsComplete): extract finalizeReturnOrDeath() [#155] (#232) 2026-06-16 13:06:56 +03:00
Ferywir 0750755bc1 Refactor(sendunitsComplete): extract sendBattleNotifications() [#155] (#231) 2026-06-16 12:48:44 +03:00
Ferywir 070df6d479 Refactor(sendunitsComplete): extract handleHeroPostBattle() [#155] (#230) 2026-06-16 11:47:34 +03:00
Ferywir 483da9fb18 Refactor(sendunitsComplete): extract resolveResourcesAfterBattle() [#155] (#229) 2026-06-16 10:57:55 +03:00
Ferywir 6d46c76dfb Refactor(sendunitsComplete): extract calculateHeroXpAndPoints() [#155] (#228) 2026-06-16 09:42:12 +03:00
Ferywir 509a4d4137 Refactor(sendunitsComplete): extract resolveVillageTarget()/resolveOasisTarget() [#155]
Extract the per-branch defender target resolution and battle-environment
setup into two private helpers: resolveVillageTarget() and
resolveOasisTarget(). Each returns the target owner (tribe/alliance), map
info, conquest flag and the battle parameters (wall, armory/blacksmith
tech, residence, siege masonry); the village helper also returns the
evasion inputs. Both are read-only (no DB writes).

The foreach body keeps handleEvasion(), buildDefenderUnits() and
buildAttackerUnits() as explicit, ordered calls, so the village and oasis
branches are now symmetric orchestration.

Behaviour-preserving. The building/tech reads now run inside the helper
before handleEvasion(); they read buildings and technology only (never the
troops handleEvasion() may move), so the result is unchanged. A few
dead locals are dropped (playerunit, wallgid, w; the redundant
DefenderUnit/def_ab re-inits).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-15 18:13:19 +03:00
Ferywir 4ba2507f9d Refactor(sendunitsComplete): extract resolveAttackContext() [#155]
Extract the per-attack, target-independent context resolution (attacker
village/owner tribe and alliance, war references, base flags) into a
private helper. Read-only, behaviour-preserving: the three repeated
getCachedUser() lookups on the attacker owner are collapsed into one
(the user cache makes them idempotent).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-15 17:40:04 +03:00
Ferywir 89b0fa50f5 Refactor(sendunitsComplete): extract buildDefenderUnits() [#155]
The defender's units were gathered by two near-identical inline blocks
(village and oasis targets). Extract them into a single private method
buildDefenderUnits() returning the defender's own troops (normalised to
non-negative ints), the aggregated reinforcement totals (enforDefender) and
the raw reinforcement rows (enforcementarray).

Pure behaviour-preserving extraction:
- Both call sites assign the returned bundle; all downstream usages unchanged.
- The oasis reinforcement aggregation now uses the same isset-guarded loop as
  the village one: identical numeric result, minus a latent PHP 8.3
  "undefined array key" notice.
- The dead `$def_ab[$i] = 0` init that lived in the village normalisation loop
  is dropped: it was unconditionally wiped by the later `$def_ab = []` before
  any use.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-15 16:41:14 +03:00
Ferywir 6edd4cc4a9 Fix(market): restore "max per merchant" click in send-resources tab
The marketplace send tab (17.tpl) was refactored with an empty <script>
block, which dropped the `haendler` (available merchants) and `carry`
(per-merchant capacity) globals that add_res()/upd_res() in unx.js rely on.
Without them `ic = haendler * carry` evaluates to NaN, so clicking the
"(capacity)" link next to a resource (or the resource icon) no longer fills
the input. Restore the two globals so the max-per-merchant fill works again.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-15 15:27:49 +03:00
Ferywir a2f5cfdbac Refactor(sendunitsComplete): extract buildAttackerUnits() [#155]
The attacking army was built by two near-identical inline blocks (village
and oasis targets). Extract them into a single private method
buildAttackerUnits() that returns the Attacker unit array (u<start..end> +
uhero) together with the catapult / ram / chief / scout unit ids used in the
report. The oasis target keeps its Nature siege/chief slots (37/38/39) via
the $isoasis flag.

Pure behaviour-preserving extraction: both call sites now assign the returned
bundle, so all downstream usages remain unchanged. The unit-id picks are
initialised to null (they are always set for the real attacker tribes 1/2/3/5;
only the unreachable Nature-attacker case differs, which silences a latent
PHP 8.3 undefined-variable notice).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-15 15:27:09 +03:00
Ferywir 76aa781ee6 Refactor(sendunitsComplete): extract applyRamDamage() [#155]
Move the ram-damage handling out of sendunitsComplete() into a dedicated
private method applyRamDamage(). For a normal attack (type 3) with rams, it
computes the new wall level, updates it in the database (recounting the
village population when the wall is destroyed), builds the report fragment,
and recalculates the battle when the wall level changed.

Pure behaviour-preserving extraction: the battle-recalc context is passed in
a single $ctx array; the call site keeps the t7 guard and assigns the
returned battlepart / info_ram, so all downstream usages remain unchanged.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-15 13:33:38 +03:00
Ferywir c97fa6c71a Refactor(sendunitsComplete): extract calculateTrappedUnits() [#155]
Move the trapper resolution block out of sendunitsComplete() into a
dedicated private method calculateTrappedUnits(). It computes how many
incoming attacker units are caught in the defender's traps (Gaul trapper
or Natar capital), updates the trap counters and the prisoners table, and
subtracts the trapped troops from the attacking army.

Pure behaviour-preserving extraction: the inline `${'traped'.$i}`
variables are rehydrated at the call site from the returned bundle, so all
downstream usages remain unchanged.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-15 12:53:34 +03:00
Ferywir 7ec51902fd Refactor(sendunitsComplete): extract calculatePopulations() [#155]
Move the attacker/defender total-population computation (and the two
getProfileVillages() lookups that feed it) out of the per-attack loop into a
dedicated private method. Behaviour-preserving: the method takes the initial
$defpop/$attpop (0 for villages, 500 for the oasis branch) and accumulates onto
them exactly as before, and returns the village lists ($varray/$varray1) used
later for the can-destroy check and handleConquest().

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-15 10:32:41 +03:00
Ferywir 4842b7edc1 Fix(i18n/fr): correct remaining old unit names in descriptions and lore
Follow-up to the unit/tribe rename: a few strings still used the old names.

- MANUAL_UDESC_11: "Les Massues" -> "Les Combattants au gourdin" (U11),
  so the in-game manual description matches the unit name.
- TZ_MACEMAN: "Massue" -> "Combattant au gourdin" (used as the U11 label in
  the alliance forum troop picker).
- Conquest help text: the loyalty-reduction units listed "COMMANDANTS, CHEFS"
  (old Teuton name) -> "CHEFS, CHEFS DE TRIBU", matching Senator/Chief/
  Chieftain (Romain/Germain/Gaulois) like the English version.
- Wonder-of-the-World lore: anglicism "Natarian" -> "natarien/natarienne"
  (empire natarien, capitale natarienne, menace natarienne), consistent with
  the Natar unit names.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-15 09:37:23 +03:00
Ferywir a79f31746b Fix(i18n/manual): translate troop-list titles via TROOPS/TRIBE constants
The five troop-overview pages hardcoded the English title "Troops (X)",
so the in-game manual kept showing e.g. "Troops (Teutons)" even in French,
inconsistent with the now-corrected unit/tribe names. Replace the hardcoded
titles with the existing TROOPS and TRIBE1-5 constants (consistent with the
#186 manual i18n migration) so the title follows the active language,
e.g. "Troupes (Germains)" in French. en.php already defines all of these
constants as the idempotent fallback, so other languages are unaffected.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-15 09:37:23 +03:00
Ferywir 84d736a342 Fix(i18n/fr): correct French tribe and unit names to match Travian
- Tribe 2 renamed Teutons -> Germains (the French name for this tribe),
  including all manual/tooltip/description texts and adjective forms
  (heros germain, armee germaine, troupes germaines).
- Teuton units: Massueur -> Combattant au gourdin (U11),
  Hallebardier -> Combattant a la lance (U12),
  Chevalier teutonique -> Cavalier teuton (U16), Commandant -> Chef (U19).
- Roman units: Imperial -> Imperian (U3) and official Latin cavalry names
  Equites Legati/Imperatoris/Caesaris (U4-U6).
- Gaul units: Foudre de Teutates -> Teutates accent (U24),
  Haeduen -> Hedui (U26).
- Natar units: anglicism natarian -> natarien (U46/U49/U50) and
  "artefact natarian" -> "artefact natarien" in building descriptions.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-15 09:37:23 +03:00
Ferywir 2e09148bb7 Fix(farmlist): raid bugs and PHP 8.3 warnings (#217) 2026-06-15 07:53:14 +03:00
Ferywir 8398265641 Refactor(sendunitsComplete): extract collectReinforcementReport() [#155]
Extract the pre-casualty defender report block into a new private method
collectReinforcementReport(): reset and rebuild the reinforcement unit totals
($DefenderEnf) and per-tribe hero totals from a fresh re-select, fold
reinforcement heroes into the defender's hero count, build the "units sent"
report rows (own troops + reinforcements and their masked variants), and
(re)initialise the per-tribe dead-hero accumulator. The bundle is returned to
the caller and the defender's folded hero count is reassigned at the call site.

Pure behaviour-preserving extraction. Method name matches the maintainer's
roadmap for #155.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-15 07:52:36 +03:00
Ferywir ae0ab66099 Refactor(sendunitsComplete): extract applyReinforcementCasualties() [#155]
Extract the "kill other defence in village" block (reinforcement casualties)
into a new private method applyReinforcementCasualties(): compute each
reinforcement's dead units/hero, persist them (modifyEnforce), notify the
reinforcing players, and delete fully-wiped reinforcements. Dead counts are
accumulated into $alldead and dead heroes into $DefenderHeroesDeadArray (both
passed by reference); the tribe-presence flags (rom/ger/gal/nat/natar) are
returned to the caller.

Pure behaviour-preserving extraction. Also drops two dead recomputations of
$totalsend_att/$totaldead_att that sat inside the loop and were immediately
overwritten right after it.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-14 21:38:43 +03:00
Ferywir e167322d12 Refactor(sendunitsComplete): extract applyOwnDefenceCasualties() [#155]
Move the in-village defender casualty handling (kill ratio applied to the
defender's own troops + hero, persisted via modifyUnit) out of the giant
sendunitsComplete() loop into a dedicated private method returning the
$owndead map. Pure behaviour-preserving extraction; also drops a dead $u
variable that was assigned but never read.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-14 11:39:26 +03:00
Catalin Novgorodschi 580702c5bc Some security for admin.php
Added some security and some style change
2026-06-14 10:22:18 +03:00
Catalin Novgorodschi 6b560ed3b3 Merge pull request #212 from Ferywir/pr/npc-resource-distribution 2026-06-14 06:31:07 +03:00