[echira]

Aegis Interactive Control Panel

*released by echira and veriad under original coding of Nucleo*

THIS DOES HAVE WEAKNESSES VIA SQL INJECTIONS... sorry :/

Added Feature Support:

• Server based rules support - lets users read the rules before they sign up for an account.
  
• Guild leaders can upload their own guild's emblems to the guild ladder page.
  
• Admin Itemlog viewing pages allowing the administrator to view the itemlogs and is searchable by Character, Item, or the most recent logs produced.
  
• Inactive account deletion option on account_cleanup was moved from 2 weeks to 3 weeks, though we do not suggest this option to be used at all.
  
• Enhanced the amout of configuration options in conf.def.php
  
• Money transfer bugs and exploits are fixed.
  
• Character GID protection removed from money transfer
  
• "Storage Storage" allowing multiple storage units for 100+ items to be stored. This option is disable-able.
  
• "Character Storage" allowing a maximum of ~255 characters to be present for one account ID. This option is disable-able.
  
• Cart items can now be viewed from the "view items" dialog.
  
• Storage items are now viewable from the account manegement screen.
  
• Fixed the bugs in the password changing script.
  
• Added options for users to reset their clothing dyes to neutral (0) in case they dye themseles to a dye they do not have.
  
• Users are given an option to reset their character's location to their save point, allowing them to play again in case they accidently went to a map that they do not have.
  
• Added richest_player ladder, compares users via ladder by Zeny. This option is disable-able.
  
• Three account verification methods are introduced:
  • 1) User-account verification (mode 0) where the user is automatically authenticated when they register. This is default.
    
  • 2) Email-Verification method. An email is sent to the user and they verify it to confirm their email address. (mode 1).
    
  • 3) GM-validation. This mode will append the user's application to the 'Validating Users' page and the GMs will have to manually add it them (mode 2).
  
  
• We added a fancy menu for users to view what options they can do and to promote user-use of the Control Panel.
  
• Default page after login is now customizible - and is an option in conf.def.php.
  
• THE DATABASE CHANGES ARE LISTED IN THE CONF.DEF.PHP FILE UNDER RELEASE NOTES (for anyone who does not want to change their databases...)

Quote

Features include: (originally by Nucleo)

• User-Specific Privliged as Stated in flagged_accounts table
  
  
  
• Logging of all administrative actions 
  
  
  
• Updated GUI
  
  
  
• Account clean up scripts
  
  
  
• Entire account listing, searching, and editing, and deleting
  
  
  
• Entire character listing, searching, editing, viewing items, and deleting
  
  
  
• Full featured Guild Ladder board, shows Guild Castles owned by which guilds, level of guilds, members in each guild, and some information about each player
  
  
  
• Full featured User Ladder TOP200 listing, users are ranked by Base Lvl -> Job Lvl -> Zeny
  
  
  
• Integrated control panel for the players to modify their passwords, change their hairstyle, and transfer zeny from one character to another
  
  
  
• Authorized users can post annoucements for logged in users to see
  
  
  
• Monster listing, searching by item/map/mob, can view drops of each monster and stats
  
  
  
• Viewing online players
  
  
  
• Administrating validating users (users that have not confirmed their email yet)
  
  
  
• Nice user registration page, where users are required to validate their email before they can use their account. This registration also has a spam filter on it where users may only user the registration twice per day (24 hours). 
  
  
  
• Users may recover lost passwords via the 'Lost Password?' button at login. PHP Will send an email to the users with their account information. 

:thrilled: :P :D :D :D :D :D :D :D :D

it's been long enough waiting for this, yeah yeah yeah.
Current Mirrors:
Mirror 1
Up-to-date Patch with all edits listed below:
Patch

Quote

edits!

insert in conf.def.php on line 132:

// this is how many slots are on your characterserver. valid numbers are 3 and 5
$_SESSION['charserv_slots'] = 3

if you wish to change the number of registrations/day, add this to line 200 of conf.def.php:

	//Enter the maximum number of accounts per IP can register a day
	$_SESSION['number_ip'] = '2';

find line 192 in user_add.php, should be:

    	if ($count > 1)

and change it to:

    	if ($count > $_SESSION['number_ip'])

line 116 of your conf.def.php, i made a typo in the example, should be something like:

	//PHP Mail 'email' (must work with your smtp server defined in php.ini)
	$_SESSION['mail_name'] = 'ro-server@houston.rr.com';

same use as in the version prior.


[/b]IF YOU ARE HAVING COMPLICATIONS WITH SWITCHING OVER FROM AZNDRAGON'S ROSTER, JUST GET THE PATCH, IT'LL SAVE YOU TIME+HEADACHE[/b]

any more mirrors would be helpful. it's a small file! :D
all files are compressed with 7-zip into auto-extracting archives.
*sigh* that was a lot of typing :evil:

Thanks to:
Nucleo (of course), for doing the original coding.
Veriad, couldn't have this without you. Your coding > All :D

Special thanks to: xmarv, tweak, serra, azndragon, dovac, kitsunestarwind, and the Aegis Support Boards.


:P

This post has been edited by echira: 24 July 2004 - 08:39 AM

[Buster]

*downloading* :evil: :P :thrilled: Thank you...

[andz]

nice job

[magnet]

very nice .... indeed ... :thumbup:

[Rentus]

thank you very much for releasing it

/Edit:

in the conf.def.php you have forgotten $_SESSION['charserv_slots']

This post has been edited by Rentus: 29 June 2004 - 12:23 PM

[xmarv]

Looks nice!
I will try it out :thumbup:

This post has been edited by xmarv: 29 June 2004 - 12:12 PM

[echira]

@Rentus: yes i do know that we missed that out, but i'm not going to append that "edit" to my list until we get the char_slot.php page working right. will update asap with results.

[SolidSpit]

Downloading and giving it ago...

Good job !!

Greetz Solid

[azndragon]

How'd I get onto the list? :thrilled:

[echira]

the SQL injection help, support, meh.

[Veriad]

Important Patch Information
For anybody changing from azndragon/maldiablo's Character Roster System

Echira added an Up-to-date Patch in the original post
In order to switch to our ACP Character Storage system, you MUST download this patch. In the config.inc from your old Character Roster, find the value for your $multiplier. Then, in our conf.def.php, scroll down until you find $_SESSION['storage_multiplier'] = 10000000; Change this multiplier to whatever your old multiplier was. If you do not do this, characters in storage will be lost.

This post has been edited by Veriad: 29 June 2004 - 10:56 PM

[SolidSpit]

I was spitting at the log options and its a nice extra i removed the view all log option because mine server does not really like it when it gets used :P Now i dont want have my gm's or even myself accidently clicking it. But anyway thats not the problem i was looking when my eye fall on this.

if ($GET_action == "delall")
{
	if (ReadAccess(CurrentUser(),"del_logs") == 0)
	{
  ReDirect("view_itemlogs.php?action=search","You do not have access to delete log files");
	}
@mssql_query("delete from itemLog",$itemlog_db);
ReDirect("view_itemlogs.php?action=current","All Logs have been cleared");
}

There were a few more entry's pointing out to actions that are not used or ateleast i cant find them.. Is this something your forgot or just did not feel like finishing.. Not that it really matters but just mentioning it here ;)

O and the active log ticker does not seem to work for me.. :( is it just me missing something out ?? It just says error on page.

Also had the same problems with the mail activation option. Same problem as with the old CP version. Those who have problems check my older post in the CP2.1 topic.

And i have a question about php. Is it possible to let a query select data from two tables in one query because i want my user ranking to display the one's with the highest pvp score first and then the normal order.. I am still a complete php n00b so have mercy on me..

Greetz Solid

This post has been edited by SolidSpit: 30 June 2004 - 05:42 AM

[kitsunestarwind]

ok another problem , when moving chars to storage and back (5 slot system + 5 storage) the chars moved to storage and back well dont work
they seen to have no item and cause immediate disconnects from the zone

[xmarv]

Quote

And i have a question about php. Is it possible to let a query select data from two tables in one query because i want my user ranking to display the one's with the highest pvp score first and then the normal order.. I am still a complete php n00b so have mercy on me..

Yes it is possible at least with a new table for the user ladder...
I will test it today :)

[echira]

@SolidSpit that would be a singular query that links two tables using the type of "joins" (joining 2+ tables two one query where information can be carried across)
and about the email reg, we did not change any of the logic that it uses. i would always suggest using your local SMTP server that your ISP has provided you with, or, if you remote host, to use the one that the remote host has provided you with (a thought!). using systems like hotpop.com, etc, that give you smtp/pop3 access do not work because they require authentication to send smtp mail data. the sendmail function in php.ini does not support this method, at least, not yet, talk to the guys at php.net if you want this added :)

[azndragon]

xmarv, on Jun 30 2004, 03:26 AM, said:

Quote

And i have a question about php. Is it possible to let a query select data from two tables in one query because i want my user ranking to display the one's with the highest pvp score first and then the normal order.. I am still a complete php n00b so have mercy on me..

Yes it is possible at least with a new table for the user ladder...
I will test it today :)

Try this query for just sorting by PVP score.

SELECT charinfo.charname, PvPScore.WinTime AS Score
FROM PvPScore LEFT OUTER JOIN
charinfo ON charinfo.GID = PvPScore.GID
ORDER BY Score DESC

Or how about displaying character level and score, sorting by score, then level?

SELECT charinfo.charname, charinfo.clevel, PvPScore.WinTime AS Score
FROM PvPScore LEFT OUTER JOIN
charinfo ON charinfo.GID = PvPScore.GID
ORDER BY Score DESC, charinfo.clevel DESC

My suggestion for the Aegis CP, to increase efficiency for the ladder, try this query instead:

SELECT charinfo.charname, charinfo.job, charinfo.clevel, charinfo.joblevel, charinfo.money, PvPScore.WinTime AS Score
FROM PvPScore LEFT OUTER JOIN
charinfo ON charinfo.GID = PvPScore.GID LEFT OUTER JOIN
auth.dbo.ignored ON charinfo.AID = auth.dbo.ignored.AID
WHERE (auth.dbo.ignored.AID IS NULL)
ORDER BY charinfo.clevel DESC

I only suggest this ever since I got obsessed with JOINs and how much faster they are than doing additional queries for EACH entry, such as is_ignored in the case of the ladder.

Just for fun, why not make a GM ladder? :crazy:

SELECT charinfo.charname, charinfo.job, charinfo.clevel, charinfo.joblevel, charinfo.money, PvPScore.WinTime AS Score
FROM PvPScore LEFT OUTER JOIN
charinfo ON charinfo.GID = PvPScore.GID LEFT OUTER JOIN
auth.dbo.ignored ON charinfo.AID = auth.dbo.ignored.AID
WHERE (auth.dbo.ignored.AID IS NOT NULL)
ORDER BY charinfo.clevel DESC

Damn, I'm getting pretty good at JOINs now, only thing that I had trouble with was accessing different tables from different databases, never used those in Athena :unsure:

[SolidSpit]

Thx for all the info guys.. And echira i was using my ISP smtp server and it did not work until i modified a line in memory.php and now it works like a charm.

But i will start working on that ranking system as soon as i finished my dinner :thrilled:

EDIT

Hehehehe i have been trying to get it to work but i guese a am bigger n00b at this then i thought.. I just keep getting errors. I could ask for someone to show me the excact thing to needed to be changed in the php script in order to get it to work but i actually dont want anymore help but i think this is a bit over my head just yet.

Greetz Solid

This post has been edited by SolidSpit: 30 June 2004 - 08:06 PM

[Veriad]

azndragon, I like to use JOINs for efficiency too. But, in the ACP, I would need to do a lot of rewriting to fix up those queries. So, I figured, I might as well rewrite the entire CP, with more features and better... stuff... and more efficiency! If I ever get done (or get started...), I'll post it for everyone

[SolidSpit]

Well veriad and all those who worked on it you did a very good job and i think its very much apriciated by those who use it. Offcourse you will always see things that could be done better but its up to you or any one else who has the knowledge to make it even better..

Only i bumber on a error or atleast it says its a error..

When you go to guild rankings and then say your a guild master and you want to add a guild emblem i get this.

Quote

Warning: mssql_query(): message: Line 1: Incorrect syntax near 'aka'. (severity 15) in W:\www\dutchRO\cp2\gd_emblem.php on line 74

Warning: mssql_query(): message: Unclosed quotation mark before the character string ''. (severity 15) in W:\www\dutchRO\cp2\gd_emblem.php on line 74

Warning: mssql_query(): Query failed in W:\www\dutchRO\cp2\gd_emblem.php on line 74

Warning: mssql_fetch_array(): supplied argument is not a valid MS SQL-result resource in W:\www\dutchRO\cp2\memory.php on line 276

Now i looked at the script and the excact same line thats on line 74 is also on line 33 but that does not give a error.. But everything does work anyway i can just upload a guild emblem ect.. So my question is has this something to do with security or just a small error you guys made when making it..?? Because that error just looks bad.

EDIT 2

Hmmm i just got a bad thought. I was looking at that incorrect syntax near 'aka' error. First i was confused why the heck it said that and then it hit me. Its the name of player at my server thats named O'aka the 3rd now could the ' in his name have something to do with it..??

EDIT 3

LOL !!! That was indeed the problem i removed the ' from his name and error is gone. :happy:

Greetz SolidSpit

This post has been edited by SolidSpit: 30 June 2004 - 08:58 PM

[azndragon]

Veriad, on Jun 30 2004, 03:27 PM, said:

azndragon, I like to use JOINs for efficiency too. But, in the ACP, I would need to do a lot of rewriting to fix up those queries. So, I figured, I might as well rewrite the entire CP, with more features and better... stuff... and more efficiency! If I ever get done (or get started...), I'll post it for everyone

What's wrong with re-writing code? :happy: I had to do that will all my queries for my CP, and in the end, I love the results much better, because it's faster execution time, and less load for your SQL server. If you have many users that use the CP, the performance makes a difference :happy: