User_info fix for HabboPHP

[Dokotrs]

Add code just below "require 'init.php';" in me.php

 $my_id = $user->id;
$regdate = $user->account_created;
$regstamp = strtotime($regdate);
$userinfo = mysql_query("SELECT user_id FROM user_info WHERE user_id = '".$my_id."'") or die(mysql_error());
$userinfo_num = mysql_num_rows($userinfo);
if($userinfo_num == 0){
mysql_query("INSERT INTO user_info (user_id, bans, cautions, reg_timestamp, login_timestamp, cfhs, cfhs_abusive) VALUES ('".$my_id."',0,0,'".$regstamp."',0,0,0)");
}

Q: What's the point of fixing user_info?

A: It makes the 'my page' in client work.


Credits to thewicard from devbest. :)

[MentaL]

[Chapo]

Nice fix :-)

[Zedd]

HabboPHP sucks...

[Dokotrs]

HabboPHP sucks...

Why?

Sent from my GT-I8160 using Tapatalk 2

[Zedd]

Bad security
Don't have a web.config or .htaccess
Using SHA1

But the design is perfect.

[Matata]

Bad security
Don't have a web.config or .htaccess
Using SHA1

But the design is perfect.

Easy to change.

[sh0ckw4v3]

Bad security
Don't have a web.config or .htaccess
Using SHA1

But the design is perfect.

"Using SHA1" And what is bad about SHA1? i would like to know.

[Zedd]

u need a hash code etc, and NO cms's use it.

stop rage m8.

[Hejula]

u need a hash code etc, and NO cms's use it.

stop rage m8.

So create a simple script forcing users to update their password when they next login. It's not difficult.

[sh0ckw4v3]

u need a hash code etc, and NO cms's use it.

stop rage m8.

That's not a reason to say anything about SHA1. Better yet, lets just md4 it.

[cbalow]

Why bad security ?

[Zedd]

Someone with how to make it work on MD5? And also a web.config, and too how to fix exploits.

[Chapo]

Someone with how to make it work on MD5? And also a web.config, and too how to fix exploits.

Replace old encryption with MD5, Google and Google.

[cbalow]

Someone with how to make it work on MD5? And also a web.config, and too how to fix exploits.

Which exploits ? I see any one.