[BETA] MapleBitCMS

[Lowbobs]

Are you trying to login via the root user remotely? If so then don't. As I said, create a new user and in one of the arguments you should be able to add a parameter for remote connection and you are supposed to write the IP of the server you're trying to connect from, this will whitelist the IP and should allow you to connect remotely. Other than that there should be a setting for remote connections through the MySQL Admin utility.

Thanks, I got it to work now.. but when I try and register an account the captcha seems to have an error and the link provided does not work:

[Snopboy]

Thanks, I got it to work now.. but when I try and register an account the captcha seems to have an error and the link provided does not work:

Then register your captcha in the link that you sent there, follow the instructions.

[Lowbobs]

Then register your captcha in the link that you sent there, follow the instructions.

Thats the thing, the link provided does not work.

[oheybongza]

I want to add status online/offline help me pls.
this my picture
Imgur: The most awesome images on the Internet

[Snopboy]

Thats the thing, the link provided does not work.

Use Google, please..... Just Google "recaptcha API" and you'll find the current address.

I want to add status online/offline help me pls.
this my picture
Imgur: The most awesome images on the Internet

Use fsockopen(), with the target IP and port as the arguments, the result is a Boolean, if it's online it will return true (or 1, same thing), otherwise it will return false (or 0, depending on how you accept it, either as an integer or as a verbal Boolean).

Edit
Being as lazy as I am, as well as being with my phone and a shitty connection in the middle of the desert, I did not check the image until I read your pm and saw it there.
A solution for this is simply to run a query that takes the character's accountid column and joins it with the I'd of the account table, then simply write an if-else statement. If the loggedin column is anything above 2, mark it as online, else offline. Not sure if it's the right way to go for individual characters, but it will say if the account itself is past world selection. There might be a column for characters where it says if it's online but I can't possibly check and confirm this on my phone, check the characters table for more info about the data that it stores.

[oheybongza]

yes i need to add status for my character. i can added fame,meso,genders to show on ranking
but i don't know code to added to show status online or offline for character and how to adding code.
this is my code from ranking.php
Section1

$name = $row['name'];
$fame = $row['fame'];
$meso = $row['meso'];

Section2

if($servertype == 1) {$result = $mysqli->query("SELECT c.name , c.gm, c.job, c.level, c.reborns, g.guildid, c.gender, c.fame, c.meso,

Section3

<td>".$row['level']."</td>
<td><b>Gender:</b> ".$Genders[$row['gender']]."
<br><b>Fame:</b> <span style="color: $color;">".$row['fame']."</span>
<br><b>Meso:</b> ".$row['meso']."<br><b>Status:</b>

u can adding or teach for me pls. i need your help

[Lowbobs]

Use Google, please..... Just Google "recaptcha API" and you'll find the current address.
Use fsockopen(), with the target IP and port as the arguments, the result is a Boolean, if it's online it will return true (or 1, same thing), otherwise it will return false (or 0, depending on how you accept it, either as an integer or as a verbal Boolean).

Edit
Being as lazy as I am, as well as being with my phone and a shitty connection in the middle of the desert, I did not check the image until I read your pm and saw it there.
A solution for this is simply to run a query that takes the character's accountid column and joins it with the I'd of the account table, then simply write an if-else statement. If the loggedin column is anything above 2, mark it as online, else offline. Not sure if it's the right way to go for individual characters, but it will say if the account itself is past world selection. There might be a column for characters where it says if it's online but I can't possibly check and confirm this on my phone, check the characters table for more info about the data that it stores.

Yeah I have managed to fix it now.

P.S. This advice isnt particularly helpful for someone with no knowledge of php or recaptcha in general. I used MapleFreak's fix for the issue, I couldn't get it to work otherwise.

[cljnilsson]

Currently having two problems with this.

1. I cannot log in on the website.
1.1. The account I am trying to log in with was created before the website so maybe that is somehow related? if so I am in a bit of trouble because the google recaptcha requires me to host the server + website in order to make it work. And at the moment I am just running it locally.
2. The character images are not working.
2.1. As for character images, I am clueless. The image simply does not get generated and I get the "GET 404 Not Found 404 (Not Found)"
Norm being a character's name. However my second character gets displayed properly.

[nuzz]

Hi, been using your CMS successfully for awhile, but recently suffered from an SQL injection attack where the user was able to modify my admin password and vandalize my website. My downloaded version is ~ 1 month ago so v1.16. Has anyone else had problems?

[greenelfx]

Hi, been using your CMS successfully for awhile, but recently suffered from an SQL injection attack where the user was able to modify my admin password and vandalize my website. My downloaded version is ~ 1 month ago so v1.16. Has anyone else had problems?

Hm..that's concerning! I haven't looked at the source code in many months, but if you locate the attack vector I can get a fix pushed out immediately.
My guess it somewhere in the ticketing system or buynx system...

[Phee Kai Sheng]

Hm..that's concerning! I haven't looked at the source code in many months, but if you locate the attack vector I can get a fix pushed out immediately.
My guess it somewhere in the ticketing system or buynx system...

Guess that you really need to fix that. its very dangerous haha. i used your CMS too :D i do facing this problem in the past too

[greenelfx]

Guess that you really need to fix that. its very dangerous haha. i used your CMS too :D i do facing this problem in the past too

Until someone finds or reveals the vector I can't really fix it..MapleBit is essentially a dead project and I have 0 time to investigate myself.

[Phee Kai Sheng]

Until someone finds or reveals the vector I can't really fix it..MapleBit is essentially a dead project and I have 0 time to investigate myself.

What you mean by a dead project.? well how to reveals the vector actually. Lol

[greenelfx]

What you mean by a dead project.? well how to reveals the vector actually. Lol

Dead as in there is no active development being done on the project, and someone should write a new CMS that doesn't use old design styles found in MapleBit. If you can find how the attacker injected your site I can roll out a fix.

[Phee Kai Sheng]

Dead as in there is no active development being done on the project, and someone should write a new CMS that doesn't use old design styles found in MapleBit. If you can find how the attacker injected your site I can roll out a fix.

Well i guess he attacked through ticket or other? im not sure. because he logged into the DATABSE and do forgot password and change his own pw for the accounts he wanna hack. anyway he can view all accounts in the db

[MapleCloud]

Hello,
I installed maplebit CMS onto wampserver www directory and followed the installation process and everything is set up. During the installation process, it asks to create admin account so I put "admin".
After everything was set up, on the bottom of the website it says "Admins: click here to edit" with no link.
Also, I have no idea how to access the admin panel. How can I access it to configure the website?

[MilesVor]

Hello,
I installed maplebit CMS onto wampserver www directory and followed the installation process and everything is set up. During the installation process, it asks to create admin account so I put "admin".
After everything was set up, on the bottom of the website it says "Admins: click here to edit" with no link.
Also, I have no idea how to access the admin panel. How can I access it to configure the website?

@MapleCloud
After you install, it asks for your account, you log into the control panel then you can click the line and edit it.
Here is a screenshot of it would look like.



@greenelfx - I'm attempting to run the latest download of MapleBit-1.16 with WAMP3, using PHP 5.6.25 and MySQL 5.7.14. I have been getting 2 errors. Any way you could help me out here?

1st error is the Login script says "Wrong username or password" but when you click on another page's link it's logged in. Not sure what's going on here.

2nd error is the Registration script does not insert into the mysql database, however it does Select properly as it does check if an account exists already. So I know it's connecting to the database properly. I attempted an echo of my insert command and inserted it directly into the database using the SQL query of phpmyadmin and got this error:
INSERT INTO `accounts` (`name`, `password`, `ip`, `email`, `birthday`) VALUES ('test', '(REMOVED SALTED HASH)', '::1', 'test@gmail.com', '1990-01-01')
MySQL said: Documentation
#1292 - Incorrect datetime value: '0000-00-00 00:00:00' for column 'tempban' at row 1

EDIT:
I figured out the 2nd problem. Turns out I needed to edit my SQL Mode of the brand new wamp install. By default it includes "NO_ZERO_IN_DATE" and "NO_ZERO_DATE"
So I included this in my my.ini file which allows the other defaults to stay.

sql-mode="ONLY_FULL_GROUP_BY,STRICT_TRANS_TABLES,ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION"

Edit2: The Login problem fixed after I fixed my registration issue! Woot Nevermind Greenelfx. LOL!

[Soyrce]

ok, after i install this cms and got it :)

can any help me in PM, how can i add icon of discord? change icon of online/offline?

[rickomars]

Whatever i try to set my password to in mysql it always says invalid Id/pw when i try to login the website, any ideas ?

[Fenomenoide]

Whatever i try to set my password to in mysql it always says invalid Id/pw when i try to login the website, any ideas ?

Do you create ur account via Website or via Navicat-Mysql???
If u create via mysql, the website only read the password with encryption, i dont remember wich encryption maplebit use. i think sha-21?

[rickomars]

Do you create ur account via Website or via Navicat-Mysql???
If u create via mysql, the website only read the password with encryption, i dont remember wich encryption maplebit use. i think sha-21?

I Cannot register through the site because im not able to access the admin page and configure the recaptcha, however i created the account in MySQL workbench and i can access it through the serve but not the website :/

[Fenomenoide]

I Cannot register through the site because im not able to access the admin page and configure the recaptcha, however i created the account in MySQL workbench and i can access it through the serve but not the website :/

Re-install the website and try again.. U need register when installing the site.
U cant access in the website if u create ur account via "workbench or mysql or navicat or whatever" or change ur password in Workbench with that:

set this to ur password in workbench

1e453d1f4b522a15fadd7c8777fc3f9b3ac29bc1


the password is camerun

[Mapleleaf1]

how i remove ReCAPTCHA from register ?

[nasuki]

i set myself as a GM but i cannot see the "admin panel" to setup my reCAPTCHA

[moshe23]

i set myself as a GM but i cannot see the "admin panel" to setup my reCAPTCHA

crate acc in Mysql: only the account!: number id is 1 name acc: nasuki pass: 1e453d1f4b522a15fadd7c8777fc3f9b3ac29bc1
and in the server/site the pass is: camerun