[Release] Pokemon-Area based browser game

[Dialect]

I don't even have an admin account

[Chron0s]

I don't even have an admin account

You have to go into phpMyAdmin (or whatever database system you use), find your user value, and change it into 3. This will make you an administrator.

[Dialect]

Hmm, but how will I know the admin details?
I can't register accounts either because the captcha images show blank stuff.

[The General]

Hmm, but how will I know the admin details?
I can't register accounts either because the captcha images show blank stuff.

Then fix it. You can disable it in the code or fix the captcha.

Kiru could you PM me your skype. I'd like to ask you some questions :)

[KiruHoshino]

Hello guys.

Today I will give the Pokemon-Arena new admin panel system. The current version includes the complete management of users.

Features:
- Online Players
- Search Players
- Player Profile edit
- Player ban
- Player Pokemons

Images:
Attachment 134671 Attachment 134672 Attachment 134742 Attachment 134743 Attachment 134744

Download: panel.rar

If you like? Push the a like button.

[Raggaer]

Hello guys.

Today I will give the Pokemon-Arena new admin panel system. The current version includes the complete management of users.

Features:
- Online Players
- Search Players
- Player Profile edit
- Player ban
- Player Pokemons

Images:
Attachment 134671 Attachment 134672 Attachment 134742 Attachment 134743 Attachment 134744

Download: panel.rar

If you like? Push the a like button.

Nice release I love the design but your doing wrong several things.
You are using mysql library that is deprecated and will dissapear on newer versions of PHP, for your forms you are not using any csrf securuty, so I can call that form on my apache server and take the session information, there are some more few things, I think your method to include page content its not safe since it loads the page using $_GET with no sanitize and your not even checking if the file exists in the /page directory or whateva etc.

[KiruHoshino]

I'm sorry I'm not a programming genius. But if you're so bad you can fix it and share it through. After this in this forum.

[The General]

Nice release I love the design but your doing wrong several things.
You are using mysql library that is deprecated and will dissapear on newer versions of PHP, for your forms you are not using any csrf securuty, so I can call that form on my apache server and take the session information, there are some more few things, I think your method to include page content its not safe since it loads the page using $_GET with no sanitize and your not even checking if the file exists in the /page directory or whateva etc.

Please stop about the whole MySQL library. If you think you can do better then do it. We already know mysql library is deprecated.

[felixcruzer]

Fixed Clans,
maybe this helps someone:

clans.rar

[ninho1989]

I need the right person to set up a pokemon game... I have the dedicated to start working and the domain
if you want you can contact me ninho_1989@hotmail.com

[chaos3312]

errors with wamp server 2.2e

[chaos3312]

[The General]

This source is outdated and need updates. The reason you see all the php code on the page is that the person who coded this CMS used:

<? ?> instead of <?php ?>

<?=$var; ?> instead of <?php echo $var; ?>

if($a){ //do something } instead of if(!empty($a)){ //do something }

I'm recoding this CMS in OOP using PDO as MySQL library is outdated and I made my own TPL system.

Spoiler:

<?php
require_once('system.php');
	Core::$tpl->AddParam('site_title', $_CONFIG['site']['title']);
	Core::$tpl->AddParam('site_name', $_CONFIG['site']['name']);
	if(isset($_SESSION['id']) && isset($_SESSION['state']) && $_SESSION['state'] == "loggedin"){
		Core::$tpl->AddParam('inbox_txt', $inbox_txt);
		Core::$tpl->AddParam('event_txt', $event_txt);
		Core::$tpl->AddParam('premium_txt', $premium_txt);
		Core::$tpl->AddParam('progress', $progress);
		Core::$tpl->AddParam('gebruiker_rank', $gebruiker_rank);
		Core::$tpl->AddParam('gebruiker_pokemon', $gebruiker_pokemon['procent']);
	}else{
		Core::$tpl->AddParam('count_registered', $count['registered']);
		Core::$tpl->AddParam('count_registered_today', $count['registered_today']);
		Core::$tpl->AddParam('count_online', $count['online']);
	}
	Core::$tpl->AddFile('layout/head');
	Core::$tpl->AddFile('layout/header');
	Core::$tpl->AddFile('layout/menu');
	Core::$tpl->AddFile('layout/content_top');
	Core::$tpl->AddFile($page);
	Core::$tpl->AddFile('layout/content_bottom');
	Core::$tpl->AddFile('layout/footer');
	Core::$tpl->Output();
?>

My index ^^

EDIT:
Another reason why you shouldnt use this if you're not going to improve it:

[chaos3312]

This source is outdated and need updates. The reason you see all the php code on the page is that the person who coded this CMS used:

<? ?> instead of <?php ?>

<?=$var; ?> instead of <?php echo $var; ?>

if($a){ //do something } instead of if(!empty($a)){ //do something }

I'm recoding this CMS in OOP using PDO as MySQL library is outdated and I made my own TPL system.

Spoiler:

<?php
require_once('system.php');
	Core::$tpl->AddParam('site_title', $_CONFIG['site']['title']);
	Core::$tpl->AddParam('site_name', $_CONFIG['site']['name']);
	if(isset($_SESSION['id']) && isset($_SESSION['state']) && $_SESSION['state'] == "loggedin"){
		Core::$tpl->AddParam('inbox_txt', $inbox_txt);
		Core::$tpl->AddParam('event_txt', $event_txt);
		Core::$tpl->AddParam('premium_txt', $premium_txt);
		Core::$tpl->AddParam('progress', $progress);
		Core::$tpl->AddParam('gebruiker_rank', $gebruiker_rank);
		Core::$tpl->AddParam('gebruiker_pokemon', $gebruiker_pokemon['procent']);
	}else{
		Core::$tpl->AddParam('count_registered', $count['registered']);
		Core::$tpl->AddParam('count_registered_today', $count['registered_today']);
		Core::$tpl->AddParam('count_online', $count['online']);
	}
	Core::$tpl->AddFile('layout/head');
	Core::$tpl->AddFile('layout/header');
	Core::$tpl->AddFile('layout/menu');
	Core::$tpl->AddFile('layout/content_top');
	Core::$tpl->AddFile($page);
	Core::$tpl->AddFile('layout/content_bottom');
	Core::$tpl->AddFile('layout/footer');
	Core::$tpl->Output();
?>

My index ^^

EDIT:
Another reason why you shouldnt use this if you're not going to improve it:

erm,, by the way can you upload "EDIT: Another reason why you shouldnt use this if you're not going to improve it:" the source for me ??

[The General]

erm,, by the way can you upload "EDIT: Another reason why you shouldnt use this if you're not going to improve it:" the source for me ??

No as my whole CMS is OOP and using PDO ;)
Wont work with the original one.

Note I do not hack these even though I can. There are many exploits and ways to XSS inject. All these examples are done by one single bug.