Commit Graph

819 Commits

Author SHA1 Message Date
Martin Ambrus a7cd9c8a0c fix: errors with empty post data in combat simulator 2017-10-21 22:57:08 +02:00
Martin Ambrus 77a1d9879d fix: Great Workshop shown as error in Admin (editing Village) 2017-10-21 22:38:01 +02:00
Martin Ambrus 78694da32b fix: player deleting & password checks work as intended 2017-10-21 11:30:38 +02:00
Martin Ambrus c262fba318 fix: mysqli_num_rows() has only 1 param 2017-10-21 11:26:37 +02:00
Martin Ambrus b63df89034 fix: logs work again (were missing mysqli connection identifier) 2017-10-21 10:45:22 +02:00
Martin Ambrus 9391553dcb feat: front-end page names 2017-10-20 18:17:42 +02:00
Martin Ambrus 0737b5879d fix: new lines in profile description stripped out and garbled 2017-10-20 12:56:52 +02:00
Martin Ambrus cc51e9ad91 fix: DB class not included in some admin actions 2017-10-20 12:47:39 +02:00
Martin Ambrus f4021d1452 feat: MD5 passwords exchanged for bcrypt ones 2017-10-20 12:31:27 +02:00
Martin Ambrus 606d0a6ad2 fix: DB class not included 2017-10-20 11:04:28 +02:00
Martin Ambrus 590892348a fix: potential SQL injection 2017-10-20 00:52:47 +02:00
Martin Ambrus b3ae55f48a fix: db query function should not have duplicate escaping 2017-10-20 00:49:39 +02:00
Martin Ambrus c3ee6a484f fix: Database class not included in Admin module action 2017-10-20 00:10:48 +02:00
Martin Ambrus 331885a110 fix: remove SQL injections in Admin 2017-10-19 21:17:11 +02:00
Martin Ambrus 529bb2209c fix: statistics are counting again 2017-10-19 15:04:16 +02:00
Martin Ambrus 383aa36e54 fix: Multihunter login can no longer build fields above level 20 2017-10-18 12:50:45 +02:00
Martin Ambrus 4c2c769a44 chore: ToDo and formatting 2017-10-18 12:43:37 +02:00
Martin Ambrus a9f67cbb1c fix: units training now works again 2017-10-18 10:54:12 +02:00
Martin Ambrus d76669cb42 fix: last batch of manual INT typecastings 2017-10-18 01:11:25 +02:00
Martin Ambrus 6f3973748c fix: more manual typecastings 2017-10-18 00:59:49 +02:00
Martin Ambrus 057f713528 fix: a LOT of manual typecastings for DB values that should be INTs 2017-10-18 00:33:03 +02:00
Martin Ambrus b7d3a0e008 fix: proper count of attacks and troops 2017-10-17 19:17:40 +02:00
Martin Ambrus 4ef65860dd fix: this method should really not be escaped... 2017-10-17 18:49:25 +02:00
Martin Ambrus 2b12f16b3d fix: more sql injection escapes... 2017-10-17 16:13:06 +02:00
Martin Ambrus c32ef23f8b fix: assigning link to forum alliance works now 2017-10-17 13:48:23 +02:00
Martin Ambrus 49fcd5d983 fix: no more errors when alliance is in no wars 2017-10-17 13:43:02 +02:00
Martin Ambrus 71dbed0571 fix: missed-out parameters escaping added 2017-10-17 13:41:12 +02:00
Martin Ambrus ee467fe734 fix: sanitization of username in session where used directly in queries 2017-10-17 13:18:26 +02:00
Martin Ambrus ac5d3538f8 fix: mysqli_error needs MySQLi connection as parameter 2017-10-17 13:05:13 +02:00
Martin Ambrus 80c70f0f13 fix: no double-escaping of SQL queries for login 2017-10-17 12:59:03 +02:00
Martin Ambrus 359f711438 fix: expect empty records 2017-10-17 12:58:38 +02:00
Martin Ambrus 1654ce498f fix: security patching due to mysql injection vulnerabilities everywhere 2017-10-17 12:21:41 +02:00
Martin Ambrus 74cccb2a74 fix: no time limit for new village creation 2017-10-13 21:01:20 +02:00
Martin Ambrus 52a1a5203b fix: mysql_error() parameters fixed 2017-10-13 20:37:44 +02:00
Martin Ambrus d9b6eadd1b fix: extra settings correctly keep PLUS and other server settings 2017-10-09 19:45:56 +02:00
Martin Ambrus 1475b1c869 fix: admin settings correctly keep PLUS settings 2017-10-09 19:38:35 +02:00
Martin Ambrus 2f5156cdbc fix: extra settings correctly keep PLUS settings 2017-10-09 19:31:38 +02:00
Martin Ambrus 599bb1a861 fix: newsbox settings correctly keep PLUS settings 2017-10-09 19:31:08 +02:00
Martin Ambrus 2d52e3ede0 fix: log settings correctly keep PLUS settings 2017-10-09 19:30:41 +02:00
Martin Ambrus aa25833f1b fix: WW Buildingplan villages have no alliance 2017-10-09 19:15:39 +02:00
Martin Ambrus 4774d7965b fix: Units class cannot be used as array in PHP 7 2017-10-09 13:08:17 +02:00
Martin Ambruš 73ee3107e1 fix: undefined variables handling 2017-10-05 16:46:23 +02:00
Martin Ambruš 61b6d6b2e8 fix: some undefined variables
more are left here with warnings but the code is spaghetti, so it's
a lot of hide-and-seek fun for later time
2017-10-05 16:42:17 +02:00
Martin Ambruš 4d176084ee fix: undefined variables 2017-10-05 16:21:01 +02:00
Martin Ambruš b579fcac00 fix: PHP <7 constructor 2017-10-05 16:16:07 +02:00
Martin Ambruš 2c66e96083 fix: duplicate constants removal 2017-10-05 16:15:13 +02:00
Martin Ambrus e3b46ed0d0 feat: Admin-configurable PLUS settings 2017-10-04 11:36:52 +02:00
Martin Ambrus 4788e882df fix: database file did not have config included in some cases 2017-09-19 21:25:36 +02:00
Martin Ambrus db4c373ace fix: PHP4x + PHP5x constructors change for PHP7+ compatible ones 2017-09-19 20:40:43 +02:00
Martin Ambrus 0ca4c4732f fix: editing server configuration works correctly 2017-09-19 20:38:23 +02:00