[Release] Pokemon-Area based browser game

I don't even have an admin account

Quote:

---

Originally Posted by Dialect

I don't even have an admin account

---

You have to go into phpMyAdmin (or whatever database system you use), find your user value, and change it into 3. This will make you an administrator.

Hmm, but how will I know the admin details?
I can't register accounts either because the captcha images show blank stuff.

Quote:

---

Originally Posted by Dialect

Hmm, but how will I know the admin details?
I can't register accounts either because the captcha images show blank stuff.

---

Then fix it. You can disable it in the code or fix the captcha.

Kiru could you PM me your skype. I'd like to ask you some questions :)

Hello guys.

Today I will give the Pokemon-Arena new admin panel system. The current version includes the complete management of users.

Features:
- Online Players
- Search Players
- Player Profile edit
- Player ban
- Player Pokemons

Images:
Attachment 134671 Attachment 134672 Attachment 134742 Attachment 134743 Attachment 134744

Download: panel.rar

If you like? Push the a like button.

Quote:

---

Originally Posted by KiruHoshino

Hello guys.

Today I will give the Pokemon-Arena new admin panel system. The current version includes the complete management of users.

Features:
- Online Players
- Search Players
- Player Profile edit
- Player ban
- Player Pokemons

Images:
Attachment 134671 Attachment 134672 Attachment 134742 Attachment 134743 Attachment 134744

Download: panel.rar

If you like? Push the a like button.

---

Nice release I love the design but your doing wrong several things.
You are using mysql library that is deprecated and will dissapear on newer versions of PHP, for your forms you are not using any csrf securuty, so I can call that form on my apache server and take the session information, there are some more few things, I think your method to include page content its not safe since it loads the page using $_GET with no sanitize and your not even checking if the file exists in the /page directory or whateva etc.

I'm sorry I'm not a programming genius. But if you're so bad you can fix it and share it through. After this in this forum.

Quote:

---

Originally Posted by Raggaer

Nice release I love the design but your doing wrong several things.
You are using mysql library that is deprecated and will dissapear on newer versions of PHP, for your forms you are not using any csrf securuty, so I can call that form on my apache server and take the session information, there are some more few things, I think your method to include page content its not safe since it loads the page using $_GET with no sanitize and your not even checking if the file exists in the /page directory or whateva etc.

---

Please stop about the whole MySQL library. If you think you can do better then do it. We already know mysql library is deprecated.

Fixed Clans,
maybe this helps someone:

clans.rar

I need the right person to set up a pokemon game... I have the dedicated to start working and the domain
if you want you can contact me ninho_1989@hotmail.com

errors with wamp server 2.2e
Attachment 135283Attachment 135284Attachment 135285Attachment 135286Attachment 135287

Attachment 135292Attachment 135288Attachment 135289Attachment 135290Attachment 135291

Quote:

---

Originally Posted by chaos3312

Attachment 135292Attachment 135288Attachment 135289Attachment 135290Attachment 135291

---

This source is outdated and need updates. The reason you see all the php code on the page is that the person who coded this CMS used:

<? ?> instead of <?php ?>

<?=$var; ?> instead of <?php echo $var; ?>

if($a){ //do something } instead of if(!empty($a)){ //do something }

I'm recoding this CMS in OOP using PDO as MySQL library is outdated and I made my own TPL system.

Spoiler:

Code:

---

<?php
require_once('system.php');
        Core::$tpl->AddParam('site_title', $_CONFIG['site']['title']);
        Core::$tpl->AddParam('site_name', $_CONFIG['site']['name']);
        if(isset($_SESSION['id']) && isset($_SESSION['state']) && $_SESSION['state'] == "loggedin"){
                Core::$tpl->AddParam('inbox_txt', $inbox_txt);
                Core::$tpl->AddParam('event_txt', $event_txt);
                Core::$tpl->AddParam('premium_txt', $premium_txt);
                Core::$tpl->AddParam('progress', $progress);
                Core::$tpl->AddParam('gebruiker_rank', $gebruiker_rank);
                Core::$tpl->AddParam('gebruiker_pokemon', $gebruiker_pokemon['procent']);
        }else{
                Core::$tpl->AddParam('count_registered', $count['registered']);
                Core::$tpl->AddParam('count_registered_today', $count['registered_today']);
                Core::$tpl->AddParam('count_online', $count['online']);
        }
        Core::$tpl->AddFile('layout/head');
        Core::$tpl->AddFile('layout/header');
        Core::$tpl->AddFile('layout/menu');
        Core::$tpl->AddFile('layout/content_top');
        Core::$tpl->AddFile($page);
        Core::$tpl->AddFile('layout/content_bottom');
        Core::$tpl->AddFile('layout/footer');
        Core::$tpl->Output();
?>

---

My index ^^

EDIT:
Another reason why you shouldnt use this if you're not going to improve it:

http://i.imgur.com/iCjiXVm.png

Quote:

---

Originally Posted by tdid

This source is outdated and need updates. The reason you see all the php code on the page is that the person who coded this CMS used:

<? ?> instead of <?php ?>

<?=$var; ?> instead of <?php echo $var; ?>

if($a){ //do something } instead of if(!empty($a)){ //do something }

I'm recoding this CMS in OOP using PDO as MySQL library is outdated and I made my own TPL system.

Spoiler:

Code:

---

<?php
require_once('system.php');
        Core::$tpl->AddParam('site_title', $_CONFIG['site']['title']);
        Core::$tpl->AddParam('site_name', $_CONFIG['site']['name']);
        if(isset($_SESSION['id']) && isset($_SESSION['state']) && $_SESSION['state'] == "loggedin"){
                Core::$tpl->AddParam('inbox_txt', $inbox_txt);
                Core::$tpl->AddParam('event_txt', $event_txt);
                Core::$tpl->AddParam('premium_txt', $premium_txt);
                Core::$tpl->AddParam('progress', $progress);
                Core::$tpl->AddParam('gebruiker_rank', $gebruiker_rank);
                Core::$tpl->AddParam('gebruiker_pokemon', $gebruiker_pokemon['procent']);
        }else{
                Core::$tpl->AddParam('count_registered', $count['registered']);
                Core::$tpl->AddParam('count_registered_today', $count['registered_today']);
                Core::$tpl->AddParam('count_online', $count['online']);
        }
        Core::$tpl->AddFile('layout/head');
        Core::$tpl->AddFile('layout/header');
        Core::$tpl->AddFile('layout/menu');
        Core::$tpl->AddFile('layout/content_top');
        Core::$tpl->AddFile($page);
        Core::$tpl->AddFile('layout/content_bottom');
        Core::$tpl->AddFile('layout/footer');
        Core::$tpl->Output();
?>

---

My index ^^

EDIT:
Another reason why you shouldnt use this if you're not going to improve it:

http://i.imgur.com/iCjiXVm.png

---

erm,, by the way can you upload "EDIT: Another reason why you shouldnt use this if you're not going to improve it:" the source for me ??

Quote:

---

Originally Posted by chaos3312

erm,, by the way can you upload "EDIT: Another reason why you shouldnt use this if you're not going to improve it:" the source for me ??

---

No as my whole CMS is OOP and using PDO ;)
Wont work with the original one.

Note I do not hack these even though I can. There are many exploits and ways to XSS inject. All these examples are done by one single bug.

http://i.imgur.com/LIERsZT.png
http://i.imgur.com/4SKEPcE.png