WibboEmulator + Client websocket engine

[Gaby]

It's just a test client, replaced $_GET['id'] by $_SESSION['id'] for example and there is no problem. It depends on the cms

Dude this means that someone would be able to change their session ID to a user ID in the source and be able to login onto that account. This is a HUGE security issue.

 

[Kodamas]

Dude this means that someone would be able to change their session ID to a user ID in the source and be able to login onto that account. This is a HUGE security issue.

exemple: https://github.com/JasonWibbo/WibboLikeCms/blob/master/app/Controllers/Api/ApiController.php

 

[dominic]

What? you can't change a SESSION value.

$_SESSION['key'] = 'damn';
$_SESSION['key'] = 'daniel';
works fine, what's the issue

 

[Gaby]

What? you can't change a SESSION value.

If the session ID or the $_GET['id'] is supposed to be the SSO ticket, then yes it is secure. If this is not the case, then it is not secure, because some inspect element magic can easily change the ID in the client to ID 1 for example, which is mostly an admin user.

 

[MrPowa]

Hello Jason,
After doing all the steps transferred the swf in the good doc, I have a problem the customer's page is like his, impossible to launch the hotel what to do?

http://prntscr.com/np0in1
end
Screenshot by Lightshot
Hello Jason,After doing all the steps transferred the swf in the good doc, I have a problem the customer's page is like his, impossible to launch the hotel what to do?

 

[Kodamas]

Hello Jason,
After doing all the steps transferred the swf in the good doc, I have a problem the customer's page is like his, impossible to launch the hotel what to do?

http://prntscr.com/np0in1
end
Screenshot by Lightshot
Hello Jason,After doing all the steps transferred the swf in the good doc, I have a problem the customer's page is like his, impossible to launch the hotel what to do?

Checked in the console dev if there are errors

 

[MrPowa]

Screenshot by Lightshot

Good evening Jason,
I notice that the build.js and block how to unblock it?

 

[Kodamas]

Screenshot by Lightshot

Good evening Jason,
I notice that the build.js and block how to unblock it?

update your php version or remove all

if (!$request->hasHeader('Authorization') || $request->getHeaderLine('Authorization') != "t5rZR4h7") {            return $response->getBody()->write(json_encode(array('error' => "Non autoriser")));        }

here: https://github.com/JasonWibbo/WibboLikeCms/blob/master/app/Controllers/Api/ApiController.php

 

[MrPowa]

good evening jason,
I managed to run the client, however impossible to access the hotel, the problem of the famous 78%, block 78%.
https://prnt.sc/np2dnj

 

[Kodamas]

Une solution à

ce problème ? https://gyazo.com/2c7ebe395734de9a7021e04d2407b7c2

what look code ?

 

[ImNotSatan]

Why is the RC4 removed here?

 

[MrPowa]

good evening jason,
I managed to run the client, however impossible to access the hotel, the problem of the famous 78%, block 78%.
https://prnt.sc/np2dnj

 

[Gabri4]

what look code ?

I think the problem comes from the image extractor, you can share yours?

 

[Kodamas]

Wait update

 

[GregB]

Hello, I have a problem with the habbo-imaging... https://gyazo.com/36533068b315b64bcd128350d19ee818 :/

 

[Kodamas]

Hello, I have a problem with the habbo-imaging... https://gyazo.com/36533068b315b64bcd128350d19ee818 :/

Hello, url ?

 

[GregB]

Hello, it's in localhost.. But it's the same problem with all look code

 

[Kodamas]

Hello, I warn that I updated for WibboEmulator and Client Websocket

-Update production for open source Habbo.swf ( https://github.com/JasonWibbo/HabboSwfOpenSource )
-SoundManager for playing one or multi song
-Chatlog
-ignoreall cmd (the user is muted but without knowing it)
-A lot of little fixe
-and other stuff i forgot

SQL Update:

CREATE TABLE `chatlogs` (  `id` int(11) NOT NULL AUTO_INCREMENT,  `user_id` int(11) NOT NULL,  `room_id` int(11) NOT NULL,  `user_name` varchar(200) NOT NULL,  `timestamp` double NOT NULL,  `message` varchar(150) NOT NULL,  `type` varchar(10) NOT NULL,  PRIMARY KEY (`id`),  KEY `user_id` (`user_id`),  KEY `room_id` (`room_id`),  KEY `timestamp` (`timestamp`),  FULLTEXT KEY `message` (`message`)) ENGINE=InnoDB AUTO_INCREMENT=1 DEFAULT CHARSET=latin1 ROW_FORMAT=COMPACT;

ALTER TABLE `users`ADD COLUMN `ignoreall`  enum('0','1') NOT NULL DEFAULT '0' AFTER `langue`;

 

[Gabri4]

Wait update

I think the problem comes from the image extractor, you can share yours?
The image extractor of habbo-imaging

 

[Kodamas]

I think the problem comes from the image extractor, you can share yours?
The image extractor of habbo-imaging

Ah yes, try with this in php https://github.com/JasonWibbo/CompileSwf

I will share my extractor in as3 later