Commit Graph

1829 Commits

Author SHA1 Message Date
Martin Ambrus b63df89034 fix: logs work again (were missing mysqli connection identifier) 2017-10-21 10:45:22 +02:00
Martin Ambrus 9391553dcb feat: front-end page names 2017-10-20 18:17:42 +02:00
Martin Ambrus e519826621 feat: Admin page titles update to reflect subpages 2017-10-20 17:29:34 +02:00
Martin Ambrus 0737b5879d fix: new lines in profile description stripped out and garbled 2017-10-20 12:56:52 +02:00
Martin Ambrus cc51e9ad91 fix: DB class not included in some admin actions 2017-10-20 12:47:39 +02:00
Martin Ambrus f4021d1452 feat: MD5 passwords exchanged for bcrypt ones 2017-10-20 12:31:27 +02:00
Martin Ambrus 606d0a6ad2 fix: DB class not included 2017-10-20 11:04:28 +02:00
Martin Ambrus 6b3b0cf829 fix: newsbox1 best player statistics to include Admin if allowed 2017-10-20 10:04:55 +02:00
Martin Ambrus f46b94b832 fix: system message can contain quotes and no longer inserts BOM 2017-10-20 01:31:58 +02:00
Martin Ambrus 33143e9405 fix: missing mysqli_result() function for the winning page 2017-10-20 01:08:35 +02:00
Martin Ambrus 590892348a fix: potential SQL injection 2017-10-20 00:52:47 +02:00
Martin Ambrus b3ae55f48a fix: db query function should not have duplicate escaping 2017-10-20 00:49:39 +02:00
Martin Ambrus 9d997ed8d4 fix: attacker name for captured Natar village random attacks is ?? 2017-10-20 00:31:04 +02:00
Martin Ambrus c3ee6a484f fix: Database class not included in Admin module action 2017-10-20 00:10:48 +02:00
Martin Ambrus 69902b4af4 fix: Admin Map shows Natars when Player villages are not showing 2017-10-19 23:56:07 +02:00
Martin Ambrus 51cfe8fa3f fix: Multihunter village no longer shows as Natar on Map in Admin 2017-10-19 23:47:41 +02:00
Martin Ambrus 19bc403183 fix: Admin map correctly showing natar villages 2017-10-19 21:32:58 +02:00
Martin Ambrus 331885a110 fix: remove SQL injections in Admin 2017-10-19 21:17:11 +02:00
Martin Ambrus 529bb2209c fix: statistics are counting again 2017-10-19 15:04:16 +02:00
Martin Ambrus 1108054e52 fix: application/json content type from PHP handled correctly in JS 2017-10-19 10:42:30 +02:00
Martin Ambrus dd9118bb31 fix: manual content-type for map scroll 2017-10-19 10:38:47 +02:00
Martin Ambrus 383aa36e54 fix: Multihunter login can no longer build fields above level 20 2017-10-18 12:50:45 +02:00
Martin Ambrus 4c2c769a44 chore: ToDo and formatting 2017-10-18 12:43:37 +02:00
Martin Ambrus 6d9a93a4d4 fix: typo in escaping function name 2017-10-18 11:17:50 +02:00
Martin Ambrus a9f67cbb1c fix: units training now works again 2017-10-18 10:54:12 +02:00
Martin Ambrus d76669cb42 fix: last batch of manual INT typecastings 2017-10-18 01:11:25 +02:00
Martin Ambrus 6f3973748c fix: more manual typecastings 2017-10-18 00:59:49 +02:00
Martin Ambrus 51dad48fdb chore: a few TODOs 2017-10-18 00:33:23 +02:00
Martin Ambrus 057f713528 fix: a LOT of manual typecastings for DB values that should be INTs 2017-10-18 00:33:03 +02:00
Martin Ambrus 96cd79adc9 chore: PHPStorm settings ignored 2017-10-17 19:18:08 +02:00
Martin Ambrus b7d3a0e008 fix: proper count of attacks and troops 2017-10-17 19:17:40 +02:00
Martin Ambrus 4ef65860dd fix: this method should really not be escaped... 2017-10-17 18:49:25 +02:00
Martin Ambrus 0701d211c4 chore: new ToDo 2017-10-17 18:08:14 +02:00
Martin Ambrus fb8a7fcd74 fix: "generated in" fix for Rally Point 2017-10-17 16:18:15 +02:00
Martin Ambrus 2b12f16b3d fix: more sql injection escapes... 2017-10-17 16:13:06 +02:00
Martin Ambrus 17fcadc3d1 chore: version bump & readme update 2017-10-17 13:52:22 +02:00
Martin Ambrus c32ef23f8b fix: assigning link to forum alliance works now 2017-10-17 13:48:23 +02:00
Martin Ambrus 37d14cd804 chore: a ToDo was fixed with security tightening... yay :) 2017-10-17 13:46:28 +02:00
Martin Ambrus d23999abc1 chore: a new ToDo ... this one is really a stupid one :)) 2017-10-17 13:45:36 +02:00
Martin Ambrus 49fcd5d983 fix: no more errors when alliance is in no wars 2017-10-17 13:43:02 +02:00
Martin Ambrus 71dbed0571 fix: missed-out parameters escaping added 2017-10-17 13:41:12 +02:00
Martin Ambrus 583312103e chore: a ToDo task :) 2017-10-17 13:26:03 +02:00
Martin Ambrus ee467fe734 fix: sanitization of username in session where used directly in queries 2017-10-17 13:18:26 +02:00
Martin Ambrus ac5d3538f8 fix: mysqli_error needs MySQLi connection as parameter 2017-10-17 13:05:13 +02:00
Martin Ambrus 6ceb273163 chore: Eclipse settings into gitignore 2017-10-17 12:59:37 +02:00
Martin Ambrus 80c70f0f13 fix: no double-escaping of SQL queries for login 2017-10-17 12:59:03 +02:00
Martin Ambrus 359f711438 fix: expect empty records 2017-10-17 12:58:38 +02:00
Martin Ambrus 1654ce498f fix: security patching due to mysql injection vulnerabilities everywhere 2017-10-17 12:21:41 +02:00
Martin Ambrus 74cccb2a74 fix: no time limit for new village creation 2017-10-13 21:01:20 +02:00
Martin Ambrus 42a5a7ce33 chore: index to speed up searching for empty square (new registration) 2017-10-13 20:56:02 +02:00