[BETA] MapleBitCMS

Newbie Spellweaver
Joined
Jun 30, 2017
Messages
22
Reaction score
0
Re: MapleBit CMS


Hey everyone how do i restrict player registration? by checking ip.... Urgent!!
 

Attachments

You must be registered for see attachments list
Newbie Spellweaver
Joined
Jun 28, 2016
Messages
68
Reaction score
4
Hi, my database is setup on my VPS and I'm trying to get my MapleBit to connect to that but it always says "Connection Failed: Connection timed out". Is there anything that I would have to do before I could get this to work?
 
Joined
Sep 8, 2011
Messages
822
Reaction score
129
Hi, my database is setup on my VPS and I'm trying to get my MapleBit to connect to that but it always says "Connection Failed: Connection timed out". Is there anything that I would have to do before I could get this to work?

Open ports first (3306 or a custom port), then create a new MySQL user through the command line utility and allow a remote connection to it from the IP of the web hosting.
 
Newbie Spellweaver
Joined
Jun 28, 2016
Messages
68
Reaction score
4
Open ports first (3306 or a custom port), then create a new MySQL user through the command line utility and allow a remote connection to it from the IP of the web hosting.
I have already done this, is there anything else?
 
Joined
Sep 8, 2011
Messages
822
Reaction score
129
I have already done this, is there anything else?

Are you trying to login via the root user remotely? If so then don't. As I said, create a new user and in one of the arguments you should be able to add a parameter for remote connection and you are supposed to write the IP of the server you're trying to connect from, this will whitelist the IP and should allow you to connect remotely. Other than that there should be a setting for remote connections through the MySQL Admin utility.
 
Newbie Spellweaver
Joined
Jun 28, 2016
Messages
68
Reaction score
4

Thanks, I got it to work now.. but when I try and register an account the captcha seems to have an error and the link provided does not work:
 
Joined
Sep 8, 2011
Messages
822
Reaction score
129
Thats the thing, the link provided does not work.
Use Google, please..... Just Google "recaptcha API" and you'll find the current address.
I want to add status online/offline help me pls.
this my picture
(http://imgur.com/a/NiPWe)

Use fsockopen(), with the target IP and port as the arguments, the result is a Boolean, if it's online it will return true (or 1, same thing), otherwise it will return false (or 0, depending on how you accept it, either as an integer or as a verbal Boolean).

Edit
Being as lazy as I am, as well as being with my phone and a crappy connection in the middle of the desert, I did not check the image until I read your pm and saw it there.
A solution for this is simply to run a query that takes the character's accountid column and joins it with the I'd of the account table, then simply write an if-else statement. If the loggedin column is anything above 2, mark it as online, else offline. Not sure if it's the right way to go for individual characters, but it will say if the account itself is past world selection. There might be a column for characters where it says if it's online but I can't possibly check and confirm this on my phone, check the characters table for more info about the data that it stores.
 
Last edited:
Newbie Spellweaver
Joined
Sep 20, 2014
Messages
42
Reaction score
1
yes i need to add status for my character. i can added fame,meso,genders to show on ranking
but i don't know code to added to show status online or offline for character and how to adding code.
this is my code from ranking.php
Section1
$name = $row['name'];
$fame = $row['fame'];
$meso = $row['meso'];
Section2
Code:
if($servertype == 1) {$result = $mysqli->query("SELECT c.name , c.gm, c.job, c.level, c.reborns, g.guildid, c.gender, c.fame, c.meso,

Section3

Code:
<td>".$row['level']."</td>
<td><b>Gender:</b> ".$Genders[$row['gender']]."
<br><b>Fame:</b> <span style="color: $color;">".$row['fame']."</span>
<br><b>Meso:</b> ".$row['meso']."<br><b>Status:</b>

u can adding or teach for me pls. i need your help :*:
 
Newbie Spellweaver
Joined
Jun 28, 2016
Messages
68
Reaction score
4
Yeah I have managed to fix it now.

P.S. This advice isnt particularly helpful for someone with no knowledge of php or recaptcha in general. I used MapleFreak's fix for the issue, I couldn't get it to work otherwise.
 
Newbie Spellweaver
Joined
Jul 25, 2017
Messages
26
Reaction score
0
Currently having two problems with this.

1. I cannot log in on the website.
1.1. The account I am trying to log in with was created before the website so maybe that is somehow related? if so I am in a bit of trouble because the google recaptcha requires me to host the server + website in order to make it work. And at the moment I am just running it locally.
2. The character images are not working.
2.1. As for character images, I am clueless. The image simply does not get generated and I get the "GET 404 (Not Found)"
Norm being a character's name. However my second character gets displayed properly.
 
Initiate Mage
Joined
Sep 26, 2017
Messages
1
Reaction score
0
Hi, been using your CMS successfully for awhile, but recently suffered from an SQL injection attack where the user was able to modify my admin password and vandalize my website. My downloaded version is ~ 1 month ago so v1.16. Has anyone else had problems?
 
Joined
Jul 12, 2011
Messages
1,229
Reaction score
475

Hm..that's concerning! I haven't looked at the source code in many months, but if you locate the attack vector I can get a fix pushed out immediately.
My guess it somewhere in the ticketing system or buynx system...
 
Newbie Spellweaver
Joined
Nov 26, 2015
Messages
61
Reaction score
0
Hm..that's concerning! I haven't looked at the source code in many months, but if you locate the attack vector I can get a fix pushed out immediately.
My guess it somewhere in the ticketing system or buynx system...

Guess that you really need to fix that. its very dangerous haha. i used your CMS too i do facing this problem in the past too
 
Newbie Spellweaver
Joined
Nov 26, 2015
Messages
61
Reaction score
0
Until someone finds or reveals the vector I can't really fix it..MapleBit is essentially a dead project and I have 0 time to investigate myself.

What you mean by a dead project.? well how to reveals the vector actually. Lol
 
Joined
Jul 12, 2011
Messages
1,229
Reaction score
475
What you mean by a dead project.? well how to reveals the vector actually. Lol

Dead as in there is no active development being done on the project, and someone should write a new CMS that doesn't use old design styles found in MapleBit. If you can find how the attacker injected your site I can roll out a fix.
 
Newbie Spellweaver
Joined
Nov 26, 2015
Messages
61
Reaction score
0
Dead as in there is no active development being done on the project, and someone should write a new CMS that doesn't use old design styles found in MapleBit. If you can find how the attacker injected your site I can roll out a fix.
Well i guess he attacked through ticket or other? im not sure. because he logged into the DATABSE and do forgot password and change his own pw for the accounts he wanna hack. anyway he can view all accounts in the db