WibboEmulator + Client websocket engine

[Gaby]

It's just a test client, replaced $_GET['id'] by $_SESSION['id'] for example and there is no problem. It depends on the cms

Dude this means that someone would be able to change their session ID to a user ID in the source and be able to login onto that account. This is a HUGE security issue.

 

[Kodamas]

Dude this means that someone would be able to change their session ID to a user ID in the source and be able to login onto that account. This is a HUGE security issue.

exemple:

You must be registered to see links

 

[dominic]

What? you can't change a SESSION value.

$_SESSION['key'] = 'damn';
$_SESSION['key'] = 'daniel';
works fine, what's the issue

 

[Gaby]

What? you can't change a SESSION value.

If the session ID or the $_GET['id'] is supposed to be the SSO ticket, then yes it is secure. If this is not the case, then it is not secure, because some inspect element magic can easily change the ID in the client to ID 1 for example, which is mostly an admin user.

 

[MrPowa]

Hello Jason,
After doing all the steps transferred the swf in the good doc, I have a problem the customer's page is like his, impossible to launch the hotel what to do?

http://prntscr.com/np0in1
end

You must be registered to see links

Hello Jason,After doing all the steps transferred the swf in the good doc, I have a problem the customer's page is like his, impossible to launch the hotel what to do?

 

[Kodamas]

Hello Jason,
After doing all the steps transferred the swf in the good doc, I have a problem the customer's page is like his, impossible to launch the hotel what to do?

http://prntscr.com/np0in1
end

You must be registered to see links

Hello Jason,After doing all the steps transferred the swf in the good doc, I have a problem the customer's page is like his, impossible to launch the hotel what to do?

Checked in the console dev if there are errors

 

[MrPowa]

You must be registered to see links

Good evening Jason,
I notice that the build.js and block how to unblock it?

 

[Kodamas]

You must be registered to see links

Good evening Jason,
I notice that the build.js and block how to unblock it?

update your php version or remove all

if (!$request->hasHeader('Authorization') || $request->getHeaderLine('Authorization') != "t5rZR4h7") {            return $response->getBody()->write(json_encode(array('error' => "Non autoriser")));        }

here:

You must be registered to see links

 

[MrPowa]

good evening jason,
I managed to run the client, however impossible to access the hotel, the problem of the famous 78%, block 78%.

You must be registered to see links

 

[Kodamas]

Une solution

You must be registered to see links

ce problème ?

You must be registered to see links

what look code ?

 

[ImNotSatan]

Why is the RC4 removed here?

 

[MrPowa]

good evening jason,
I managed to run the client, however impossible to access the hotel, the problem of the famous 78%, block 78%.

You must be registered to see links

 

[Gabri4]

what look code ?

I think the problem comes from the image extractor, you can share yours?

 

[Kodamas]

Wait update

 

[GregB]

Hello, I have a problem with the habbo-imaging...

You must be registered to see links

:/

 

[Kodamas]

Hello, I have a problem with the habbo-imaging...

You must be registered to see links

:/

Hello, url ?

 

[GregB]

Hello, it's in localhost.. But it's the same problem with all look code

 

[Kodamas]

Hello, I warn that I updated for WibboEmulator and Client Websocket

-Update production for open source Habbo.swf (

You must be registered to see links

)
-SoundManager for playing one or multi song
-Chatlog
-ignoreall cmd (the user is muted but without knowing it)
-A lot of little fixe
-and other stuff i forgot

SQL Update:

CREATE TABLE `chatlogs` (  `id` int(11) NOT NULL AUTO_INCREMENT,  `user_id` int(11) NOT NULL,  `room_id` int(11) NOT NULL,  `user_name` varchar(200) NOT NULL,  `timestamp` double NOT NULL,  `message` varchar(150) NOT NULL,  `type` varchar(10) NOT NULL,  PRIMARY KEY (`id`),  KEY `user_id` (`user_id`),  KEY `room_id` (`room_id`),  KEY `timestamp` (`timestamp`),  FULLTEXT KEY `message` (`message`)) ENGINE=InnoDB AUTO_INCREMENT=1 DEFAULT CHARSET=latin1 ROW_FORMAT=COMPACT;

ALTER TABLE `users`ADD COLUMN `ignoreall`  enum('0','1') NOT NULL DEFAULT '0' AFTER `langue`;

 

[Gabri4]

Wait update

I think the problem comes from the image extractor, you can share yours?
The image extractor of habbo-imaging

 

[Kodamas]

I think the problem comes from the image extractor, you can share yours?
The image extractor of habbo-imaging

Ah yes, try with this in php

You must be registered to see links

I will share my extractor in as3 later