[C#, ION/Deltar] Ion16 - [Habbo Hotel V16 Framework]

yea yea ok =)

People why are we busy with Oldskool?! R63 is the Version now. Dont waste your time @ oldskool, get higher to BETA! If you got a nice server: Everybody like ya! :D

Old is Gold and Always Will Remain Gold no matter what anyone says.

Yea that's true, but i believe none will give a shit about Oldskool later :D

Seriously, no one seems to care that nillus is back?
This is very usefull, but awa is already working on a v14 server:P

Hes a normal persone like you. No :D

@Eronisch so you say nillus will code anything again and you think he's going to code V14?

@wichard So? He's a Habbo Retro Legend like iJeax was back in those days.

Hmmm.. I might have to develop on this, it looks pretty decent.

And. Since when was Nillus back? Nice to see some Vets are finally back.

lol nillus has been visiting he was never gone.

Ahh nevermind about Legends, those boys code for Honor and then, they're gone.

This is a cool release, hoping to see some servers using this in a near future so I can code some more CMS', and oldschool is king, nothing will ever beat the v14, r63 can shove it.

Quote:

---

Originally Posted by AWA

Stealing Ion26 name idea? :P

---

Yeahh sounded sexy :)

---------- Post added at 07:29 AM ---------- Previous post was at 07:26 AM ----------

Quote:

---

Originally Posted by PowahAlert

Thanks alex.

---

Not a problem :)

Quote:

---

Originally Posted by Nillus

Not really. :P: Just cache common info like item definitions, room categories, room models, navigator, etc, etc. Simple primary-key based lookups like this are fine.

However, about that snippet... please use prepared statements / parameters / whatever for your database queries to make your code immune to SQL exploits. People can now supply a name containing one or more SQL queries as the name, and the server will happily run them.

Anyway, good initiative && good luck!

---

Ohh really? How would I stop that? :(

Quote:

---

Originally Posted by wichard

Nillus, you dont know what i mean? I mean he dont cache anything!?

---

Actually the whole server has a small plugin system that Nillus already made and users are cached... :)

Quote:

---

Originally Posted by Žak™

its a fucking framework calm down.:rolleyes:

---

;D

---------- Post added at 07:38 AM ---------- Previous post was at 07:29 AM ----------

Quote:

---

Originally Posted by wichard

yea yea ok =)

People why are we busy with Oldskool?! R63 is the Version now. Dont waste your time @ oldskool, get higher to BETA! If you got a nice server: Everybody like ya! :D

---

You can shut-up (:

No one cares about your opinion :D

To fix SQL exploit, simply put: (I think, maybe wrong method name)

PHP Code:

---

dbClient.AddParamsWithValue("name", name); 


---

under:

PHP Code:

---

            using (Ion.Storage.DatabaseClient dbClient = IonEnvironment.GetDatabase().GetClient())
            { 


---

and replace:

PHP Code:

---

                if (dbClient.ReadBoolean("SELECT * FROM users WHERE username = '" + name + "'") == true) 


---

with:

PHP Code:

---

                if (dbClient.ReadBoolean("SELECT * FROM users WHERE username = @name") == true) 


---

What a gay hotel view

Quote:

---

Originally Posted by Mithex

What a gay hotel view

---

If Alex wanted to customize it he would but as a developer you have better things to do with time instead of using MX 2004.

However, Alex; you are really loving the ION framework.

Good work!

Quote:

---

Originally Posted by AWA

To fix SQL exploit, simply put: (I think, maybe wrong method name)

PHP Code:

---

dbClient.AddParamsWithValue("name", name); 


---

under:

PHP Code:

---

            using (Ion.Storage.DatabaseClient dbClient = IonEnvironment.GetDatabase().GetClient())
            { 


---

and replace:

PHP Code:

---

                if (dbClient.ReadBoolean("SELECT * FROM users WHERE username = '" + name + "'") == true) 


---

with:

PHP Code:

---

                if (dbClient.ReadBoolean("SELECT * FROM users WHERE username = @name") == true) 


---

---

Ahh yes, I have used AddParamsWithValue in Aleeda :)
I never knew they blocked SQL injections

@HabboCOIN - Yes I do love the Ion framework :)