User_info fix for HabboPHP

Add code just below "require 'init.php';" in me.php

Code:

---

$my_id = $user->id;
$regdate = $user->account_created;
$regstamp = strtotime($regdate);
$userinfo = mysql_query("SELECT user_id FROM user_info WHERE user_id = '".$my_id."'") or die(mysql_error());
$userinfo_num = mysql_num_rows($userinfo);
if($userinfo_num == 0){
mysql_query("INSERT INTO user_info (user_id, bans, cautions, reg_timestamp, login_timestamp, cfhs, cfhs_abusive) VALUES ('".$my_id."',0,0,'".$regstamp."',0,0,0)");
}

---

Q: What's the point of fixing user_info?

A: It makes the 'my page' in client work.
Attachment 133488

Credits to thewicard from devbest. :)

Nice fix :-)

HabboPHP sucks...

Quote:

---

Originally Posted by jKody

HabboPHP sucks...

---

Why?

Sent from my GT-I8160 using Tapatalk 2

Bad security
Don't have a web.config or .htaccess
Using SHA1

But the design is perfect.

Quote:

---

Originally Posted by jKody

Bad security
Don't have a web.config or .htaccess
Using SHA1

But the design is perfect.

---

Easy to change.

Quote:

---

Originally Posted by jKody

Bad security
Don't have a web.config or .htaccess
Using SHA1

But the design is perfect.

---

"Using SHA1" And what is bad about SHA1? i would like to know.

u need a hash code etc, and NO cms's use it.

stop rage m8.

Quote:

---

Originally Posted by jKody

u need a hash code etc, and NO cms's use it.

stop rage m8.

---

So create a simple script forcing users to update their password when they next login. It's not difficult.

Quote:

---

Originally Posted by jKody

u need a hash code etc, and NO cms's use it.

stop rage m8.

---

That's not a reason to say anything about SHA1. Better yet, lets just md4 it.

Why bad security ?

Someone with how to make it work on MD5? And also a web.config, and too how to fix exploits.

Quote:

---

Originally Posted by jKody

Someone with how to make it work on MD5? And also a web.config, and too how to fix exploits.

---

Replace old encryption with MD5, Google and Google.

Quote:

---

Originally Posted by jKody

Someone with how to make it work on MD5? And also a web.config, and too how to fix exploits.

---

Which exploits ? I see any one.