Printable View
here is a release for a php admin control panel ive just made.
I have uploaded some screen shots of the hole thing
this cp works with maximum 3 ip addresses ( For secure access ) anti sql injection protection and can edit character and guild information , and action loging to check whats going on:)
extract the archive in your web server index to folder admin/ or whatever you like than just configure the config.php and run http://localhost/admin/
hope its usefull to someone ^_^
nice job.i like it its simple but shows alot
i love you(not) but thanks its wonderfull very helpfull against some idiots that have been hacking very simple and easy to use thank you so much.
when us ay "configure config.php" what exactly do we have to change?
the config.php is guided mode :) for every var there is helpQuote:
Originally Posted by qball546
PHP Code:<?php
// All credits go to InteraktivMu Team
$xa = getenv('REMOTE_ADDR');
$badwords = array(";","'","\"","*","union","DEL","insert","update","drop","select","$");
foreach($_POST as $value)
foreach($badwords as $word)
if(substr_count($value, $word) > 0)
die("Security Warning!<br />Forbidden simbols are included, please remove them and try again -> $xa");
$dbhost = "127.0.0.1";
// Enter the username to connect to the db
$dbuser = "";
// Enter the password for the SQL Server
$dbpasswd = "";
//Admin Login
$alogin = "sa";
$user = "sa";
//Administrator Pwd
$apass = "***";
$pass = "***";
//Database Name
$db = 'muonline';
//Host. IP If working remotely
$host = "127.0.0.1";
$ip = "127.0.0.1";
$msconnect=mssql_connect("$host","$alogin","$apass");
$msdb=mssql_select_db("$db",$msconnect);
// Ips that will have access to the admin console (MAX (3))
$AdminCpIp1 = '127.0.0.1';// set this to the admin ip (to check logs)
$AdminCpIp2 = '127.0.0.1';
$AdminCpIp3 = '127.0.0.1';
$uselog = '1';
// 1 - enable ,0 - disable
//in order to use the log run enterprise manager, open muonline tables , create a new table named Admin_Logs and create 2 colums
// 1) Name: Ip, type: nvarchar, allownulls: No <- this command logs the ip
// 2) Name: Command, type: nvarchar, allownulls: No, lenght = 4000 <- this column logs the command
// 3) Name: Fulldate, type: nvarchar, allownulls: No <- this column logs the date of the action
// ..save the table
// now ur logs r here http://localhost/admin/log_list.php
// to delete all logs run this query: DELETE FROM Admin_logs
?>
i have updated the hole thing ..check 1st post
bug fixed and addon
a) On Mapposx and y lenght was max 2 simb now its 3 ..
b) added LevelUpPoint Editbox
Character Information..
Warning: mssql_query(): Query failed in c:\appserv\www\admin\admin1.php on line 79
Ok Problem Solved =D
Quote:
Originally Posted by TakaShi^^
goto ur php.ini and find
and change it 2:Code:display_errors = on
and restart Apache or whatever web server u r usingCode:display_errors = off
themad you know to much :D
ahhahah funny ^^ :) i am a learning kiddie in php scripting i dont know much 4 sure :**Quote:
Originally Posted by wesleyv
HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA...You're tooooooooooooo funny.Quote:
Originally Posted by wesleyv
you pro :) can i see some of your jobs ? :**Quote:
Originally Posted by [N]asser
cuz i see u r very intusiastic about all the shits..i am wondering what are you doing :)
here is the Guild Member Add fix :**
hey I don't know how to use it plzzz teach me I wan't play with it send me all the ditails to my e-mail it is : ilmik@bk.ru
or just visit me in msn sorry about 2 replays but... well u understand me i hope so
what should I change or run to adin smth
just extract the archive to ur web server and configure config.phpQuote:
Originally Posted by wirtual
iTS not hard
useful for newbies. good job themad ;)
I'll be releasing so many things to RZ once I finish this project. I'm not doing it before that, because this project is actually earning me money. (Some guy wanted me to make him a php site for his game server (not mu)).
[N]asser` ~ Out
P.S. ~ I was complimenting that guy...and to you....I was being indirect :)
P.S.S. ~soooo true :)Quote:
Originally Posted by zolaks
hey ppl I ca't understand u what should I do with it I don't know where to paste it and how to use plzz write to me e-mail ilmik@bk.ru and give me instructions for how to use it
dude haha i dont do it for $ or whatever i just do it for helping ppl no matter if noobz or not..-.- i dont think you should be the wise guy cuz you havnt shown us nothing ..just words.. RZ is for helping ppl out .. not that what u r doing ... i think u can keep ur comments to ur self when u have nothing to help..Quote:
Originally Posted by [N]asser
Dowloaded...
I
wots a web server (lol sorry but i am new to this ) where can i find it ? :S:S
ok i exctracted to my webserver (lol somebudy sent to me now) and now wot???
(to exctract on server comp or on client comp)????
I would use this till there would be an protection within it, it takes a risk allong with this system.
Anyway, it looks good, its small.
Good job.
no bugs in security u can relaxQuote:
Originally Posted by hanno
Its works fine for me...
but it dont have any password or protection,
if a player from my server, type http:://my_muserver.no-ip.org/admin,
he can edit is player ;)
U cant protect the admin aerea?
I see a webpage that has passwords..
see =>> http://musecret.game-host.org/gmopties.php
I think that its also maked by Interaktiv
Its in portuguese if u want i can translate for you ;)
**The First option is Ban a Char**
and the 7 option is "GM...." if u click there see this page
http://musecret.game-host.org/gm_stats_input.php
the same function that the page u post (admin.rar)..
I need the complete page with password like in the first link...
THX YOU A LOT
THX FOR THE Interaktiv Team !!!
I found the web center, just click here:
http://forum.ragezone.com/showthread...highlight=site
THX U AGAIN...
Hey, the guy offered me money, so I went for it. After that, I will be releasing scripts on RZ for free...for anyone.Quote:
Originally Posted by themad
PS ~ I wouldn't run away from the errors, I'd fix them (just an advice for you).
[N]asser` ~ Out
AuthType Basic
AuthName "folder_name_what_you_wnt_to_protect"
AuthUserFile "/home/zergnm/.htpasswds/folder_name_what_i_wnt_to_protect/passwd"
require valid-user
put in passwd file:
adminlogin:adminpassword
I get an error about some "./php_mssql.dll" or somthing, i cant find this DLL anyware ( probly the problem ), can anyone tell me were to find it and were it gos? iv tryed reinstalling PHP and apache.
the errors are just deleting 2 basic lines that give itQuote:
Originally Posted by [N]asser
..but why when the errs are not fatal
that web is mi design tooQuote:
Originally Posted by Frost1n
but for me thats not such a good admin web character editor.
i Think i will debug some things on the site ^^
verry sux
Quote:
Originally Posted by Dorin1
if u dun need it stfu :) if u need it download it
no one asked about ur oppinion
its amazing package but, some errors.. look
when i open admin page > index
BUG01
BUG02Code:Notice: Undefined variable: AdminCpIp1 in c:\inetpub\wwwroot\admin\index.php on line 61
BUG03Code:Character Information..
Notice: Use of undefined constant Offline - assumed 'Offline' in c:\inetpub\wwwroot\admin\admin1.php on line 55
Notice: Undefined variable: pklevel in c:\inetpub\wwwroot\admin\admin1.php on line 60
Notice: Undefined variable: msquery in c:\inetpub\wwwroot\admin\admin1.php on line 85
Notice: Undefined variable: msquery in c:\inetpub\wwwroot\admin\admin1.php on line 86
Warning: mssql_query(): Query failed in c:\inetpub\wwwroot\admin\admin1.php on line 86
SEE SCREENSCode:Notice: Undefined variable: Pkcount in c:\inetpub\wwwroot\admin\admin2.php on line 38
Tara's stats have been changed successfully!
Notice: Undefined variable: fdate in c:\inetpub\wwwroot\admin\admin2.php on line 59
Notice: Undefined variable: current_ip in c:\inetpub\wwwroot\admin\admin2.php on line
Quote:
Originally Posted by foxfirediego
this is the first bug ..i suggest u setPHP Code:$AdminCpIp1= "127.0.0.1"; // To view logs
in php.iniPHP Code:display_errors = OFF
mmmm.. k!... only reporting... i think maybe a fail... themad.. u know where i find a script of reset, what run individual methods of reset?..Quote:
Originally Posted by themad
let me explain.. i hav too many pages of reset in PHP, but all do the same... i need one with this code:
[CODE]
<?php if (!isset($index_checking)) die("Server error!!! This page is not available..."); ?>
<table width="100%" height="5%" border="0.5">
<tr>
</tr>
<tr>
<th scope="col">
<?php
$name = stripslashes($_POST['name']);
$login = stripslashes($_COOKIE['login']);
anti_injection( $name );
anti_injection( $login );
$sql_username_check = mssql_query("SELECT memb___id FROM MEMB_INFO WHERE memb___id='$login'");
$username_check = mssql_num_rows($sql_username_check);
$sql_name_check = mssql_query("SELECT Class,Resets FROM vResets WHERE Name='$name' and AccountID = '$login'");
$name_check = mssql_num_rows($sql_name_check);
$row = mssql_fetch_row($sql_name_check);
$class_check = $row[0];
$mResets = $row[1];
if (empty($mResets)) $resets_check = 0;
else $resets_check = min(($Level_Reset + ($mResets * $Level_Up_Once)) , 350);
$sql_level_check = mssql_query("SELECT cLevel FROM Character WHERE Name = '$name' and cLevel >= '$resets_check'");
$level_check = mssql_num_rows($sql_level_check);
$sql_level_check = mssql_query("SELECT Money FROM Character WHERE Name = '$name' and Money >= '$Reset_Fee'");
$money_check = mssql_num_rows($sql_level_check);
$sql_user_online = mssql_query("SELECT memb___id FROM MEMB_STAT WHERE memb___id = '$login' and ConnectStat = '0'");
$user_online_check = mssql_num_rows($sql_user_online);
if (empty($name) || ($username_check <= 0) || ($name_check <= 0) || ($level_check <= 0) || ($money_check <= 0) || ($user_online_check <= 0))
{
echo "LỖI: <br>";
if (empty($name))
{
echo "Bạn phải đi
i dont like it :P
is sux :D