
Originally Posted by
laura555
Hey Darkmandos, the solution is:
ftp server not active in server game but in other Internet Service Provider.
http server web for page html and download file installation not active in server game but in Internet service Provider.
only file Launcher.atm by hexeditor have page for registration, but this page redirect in your server for connection database:
Example:
Create site in other free website domain,
insert this the files http and not php files because dont work external connection in database setting.
ftp active in free website domain for update version game.
in free website domain create page for request by Launcher.atm
and in this page create redirection page php:
------------------------------------
<? header("location: http://195.64.12.166/register.php"); ?>
------------------------------------
For security php POST (filter blocked the Slash function: / )
Example hack bypass:
-------
$userid= $_POST[username];
$passwd_user=$_POST[password1];
$mail_user=$_POST[mail1];
-------
the external hacker have possible change script for request
or chenge or modify database.
security script:
----------------------------
$userid= htmlspecialchars($_POST[username]);
$passwd_user= htmlspecialchars($_POST[password1]);
$mail_user= htmlspecialchars($_POST[mail1]);
$userid = stripslashes($userid);
$passwd_user = stripslashes($passwd_user);
$mail_user = stripslashes($mail_user);
----------------------------
This filter blocked another char!
Dont accept /
SQL INJECTION is blocked!