[C#, ION/Deltar] Ion16 - [Habbo Hotel V16 Framework]

[wichard]

yea yea ok =)

People why are we busy with Oldskool?! R63 is the Version now. Dont waste your time @ oldskool, get higher to BETA! If you got a nice server: Everybody like ya! :D

[Zak©]

Old is Gold and Always Will Remain Gold no matter what anyone says.

[wichard]

Yea that's true, but i believe none will give a shit about Oldskool later :D

[Eronisch]

Seriously, no one seems to care that nillus is back?
This is very usefull, but awa is already working on a v14 server:P

[wichard]

Hes a normal persone like you. No :D

[WizardKing]

@Eronisch so you say nillus will code anything again and you think he's going to code V14?

@wichard So? He's a Habbo Retro Legend like iJeax was back in those days.

[Admiral-Speedy]

Hmmm.. I might have to develop on this, it looks pretty decent.

And. Since when was Nillus back? Nice to see some Vets are finally back.

[Zak©]

lol nillus has been visiting he was never gone.

[wichard]

Ahh nevermind about Legends, those boys code for Honor and then, they're gone.

[X1M!]

This is a cool release, hoping to see some servers using this in a near future so I can code some more CMS', and oldschool is king, nothing will ever beat the v14, r63 can shove it.

[Quackster]

Stealing Ion26 name idea? :P

Yeahh sounded sexy :)

---------- Post added at 07:29 AM ---------- Previous post was at 07:26 AM ----------

Thanks alex.

Not a problem :)

Not really. Just cache common info like item definitions, room categories, room models, navigator, etc, etc. Simple primary-key based lookups like this are fine.

However, about that snippet... please use prepared statements / parameters / whatever for your database queries to make your code immune to SQL exploits. People can now supply a name containing one or more SQL queries as the name, and the server will happily run them.

Anyway, good initiative && good luck!

Ohh really? How would I stop that? :(

Nillus, you dont know what i mean? I mean he dont cache anything!?

Actually the whole server has a small plugin system that Nillus already made and users are cached... :)

its a fucking framework calm down.

;D

---------- Post added at 07:38 AM ---------- Previous post was at 07:29 AM ----------

yea yea ok =)

People why are we busy with Oldskool?! R63 is the Version now. Dont waste your time @ oldskool, get higher to BETA! If you got a nice server: Everybody like ya! :D

You can shut-up (:

No one cares about your opinion :D

[AWA]

To fix SQL exploit, simply put: (I think, maybe wrong method name)

dbClient.AddParamsWithValue("name", name); 

under:

            using (Ion.Storage.DatabaseClient dbClient = IonEnvironment.GetDatabase().GetClient())
            { 

and replace:

                if (dbClient.ReadBoolean("SELECT * FROM users WHERE username = '" + name + "'") == true) 

with:

                if (dbClient.ReadBoolean("SELECT * FROM users WHERE username = @name") == true) 

[Mithex]

What a gay hotel view

[HabboCOIN]

What a gay hotel view

If Alex wanted to customize it he would but as a developer you have better things to do with time instead of using MX 2004.

However, Alex; you are really loving the ION framework.

Good work!

[Quackster]

To fix SQL exploit, simply put: (I think, maybe wrong method name)

dbClient.AddParamsWithValue("name", name); 

under:

            using (Ion.Storage.DatabaseClient dbClient = IonEnvironment.GetDatabase().GetClient())
            { 

and replace:

                if (dbClient.ReadBoolean("SELECT * FROM users WHERE username = '" + name + "'") == true) 

with:

                if (dbClient.ReadBoolean("SELECT * FROM users WHERE username = @name") == true) 

Ahh yes, I have used AddParamsWithValue in Aleeda :)
I never knew they blocked SQL injections

@HabboCOIN - Yes I do love the Ion framework :)