Commit Graph

27 Commits

Author SHA1 Message Date
Martin Ambrus 50709a34f0 fix: wrong password verify check allows for any login 2017-12-01 19:55:24 +01:00
Martin Ambrus d3b51a34ec fix: disallow Natars user registration
#382
2017-11-26 16:56:29 +01:00
Martin Ambrus 0499d58862 fix: disable hack-registering as non-existing or NPC tribe 2017-11-24 10:24:41 +01:00
Martin Ambrus 53fa177671 fix: account activation issues
#344
2017-11-22 13:48:32 +01:00
Martin Ambrus 66132a7cdf refactor: Session.php only included once, login procedure optimization
#313
2017-11-20 00:39:37 +01:00
Martin Ambrus dab768f662 refactor: 1st round of database values caching 2017-11-15 16:01:00 +01:00
Martin Ambrus 57057384d3 refactor: SELECT * replaced by SELECT fieldname1, fieldname2 ...
So far in a few places.
2017-11-05 09:03:59 +01:00
Martin Ambrus 6f7c70a0d7 refactor: autoprefixing class includes 2017-10-28 02:17:43 +02:00
Martin Ambrus b5a0789ff2 fix: we could really use autoloader... later, later... 2017-10-25 18:17:46 +02:00
Martin Ambrus 30d3b9c4fa refactor: OOP code movements started :) 2017-10-25 13:38:38 +02:00
Martin Ambrus 11c4541f48 fix: registrations work again 2017-10-22 16:33:58 +02:00
Martin Ambrus 7270a69a63 fix: all location headers need to have exit after them! 2017-10-22 13:00:54 +02:00
Martin Ambrus f4021d1452 feat: MD5 passwords exchanged for bcrypt ones 2017-10-20 12:31:27 +02:00
Martin Ambrus 057f713528 fix: a LOT of manual typecastings for DB values that should be INTs 2017-10-18 00:33:03 +02:00
Martin Ambrus ac5d3538f8 fix: mysqli_error needs MySQLi connection as parameter 2017-10-17 13:05:13 +02:00
Martin Ambrus 80c70f0f13 fix: no double-escaping of SQL queries for login 2017-10-17 12:59:03 +02:00
Martin Ambrus 1654ce498f fix: security patching due to mysql injection vulnerabilities everywhere 2017-10-17 12:21:41 +02:00
evader1337 2d26af7c46 Trying to fix this monstrosity #2 2016-09-13 18:54:25 +02:00
Domen Kajdič 2cf2f3c343 Trying to fix this monstrosity #1 2016-09-13 15:38:14 +02:00
uroskn 1afde368d3 GameEngine and install folders have 777 already set by default 2016-07-02 21:39:28 +02:00
cosme12 f384cea18d SQL Injection fixed 2015-08-31 11:39:38 -03:00
Shadow ff5ca62a1e credits 2015-06-22 08:20:34 +03:00
Shadow e202a7e525 update 2014-03-12 09:06:46 +02:00
Shadow 60f8e330e7 Update Account.php 2013-12-05 07:39:32 +02:00
Shadow fd3a69273b Update Account.php 2013-11-08 09:52:01 +02:00
Shadowss 5d8937ad73 Fixed Registration hack 2013-11-01 07:56:21 +02:00
yi12345 98e94af807 finish hero_full.php 2013-06-16 10:38:34 +03:00