New Server Management System

[Improved]

You seriously need to get your head straight. It's an ADMIN PANEL not all admins are supposed to have access to the database ffs. That's a HUGE security issue considering a malicious user can literally bring any server to their knees with database admin access. Sure, if you're stupid enough to give all your administrators database access then you have the same issue. You need to setup a permission system and close the MSSQL port. MSSQL auth can be bruteforced, leaving the port open is extremely dangerous.

That's about the servers security, not the program. The program is only to be used by administrators, and the owners who should have access to it eitherway. The program is like a folder of queries, and the program just executes the queries for you, instead of you having to copy|paste/write them every time you need to change something.

 

[ObjectOriented]

Didn't do much with security, just some data encapsulation and obfuscation. Did the database wrapper. I don't think he's worried about security much since he's learning, as we're going through I'm explaining concepts.

 

[spikensbror]

So for example, if lethal would use this for his server and I were to hack one of his admins = Free database access for me.

 

[ObjectOriented]

I don't think you get that it's not remote. It's local. Maybe later we'll actually go back and and recode it to have a server, that does all that functions and a client that connects via sockets. As I said this is mostly a learning experiment for him, and he's also trying to help the community some. And you hacking? It'd be a miracle .

 

[spikensbror]

It was an example, I've never claimed that I can hack so **** off.

 

[Matt Clarke]

We are now doing the Functions for the commands to be executed.

 

[Improved]

Cleaned, stay on topic.

 

[Detox]

Wish you the best of luck!

I was also a bit curious on a part, Is this program suppose to work in a direct or non direct way? Meaning, are you only able to use it on the server the server is being hosted on, or can you use this tool remotely from another computer then the computer/server the server is being hosted on?

Also, If you're stuck at some part or need any extra help. I'd love contributing. Started to learn c# early this year, perhaps I'll be able to help.

Once again, good luck!

 

[spikensbror]

They mentioned it only being able to access the local machine.

 

[cKenzy]

Is this just designs? or its already started coding?

 

[Matt Clarke]

Blur, we have already started coding it and we have already got the login working, we just need to make it read the MD5 Salt for flyff, which i think will be serus.

Ceadin, Thanks for the comment, I'd love you to help if i need it this will be ran on a hosted machine, although, i did import a IP in the setup, maybe i could figure out some way where it would connect to the IP, then connect via the DB's. I don't know yet, but again, thanks for the comments, very much appreciated.

Update
We have set up the login, and it is working with the FlyFF's databases, via the accounts. We need to try it on a few server's to see if it works first, but thats that part done. We currently need to add more queries to the Functions.cs where all the queries will be defined or something like that .

More updates it we progress.
Thanks

Matt

 

[ObjectOriented]

Update
Recoding to use threaded sockets.
I'll leave Matty to finish the client.
Shouldn't be too hard, all he has to do are
the events, such as when a pop up message occurs,
blah blah blah, everything is handled pretty much
server sided, all the client can do is send/receive data.
Receiving such as the server telling the client that there
was an error, so the client creates a pop up message with
the error. He'll also need to make the gui tie in with
the sending, such as if a submit button was clicked, the
client send the command to the server so that the server
can execute it.

 

[Matt Clarke]

We are either adding or re-designing a new interface with a console application which basically tells you information about the server and what is happening ect. For example, lest say you deleted an account, in the console would show that. Or if someone logged in, it would show that.

Note; i may have got this wrong, but its what i assume Orientated wanted, sorry if this post is wrong.

 

[ObjectOriented]

nah, matty, we're just doing a gui for the cilent, the server will be console

 

[ObjectOriented]

Tbh though, my coding has been extremely messy with this project, I don't really want to release it publicly, I'll most likely just give the server to people I know will use it, and not judge my messy ass code x]. So far I've gotten threaded sockets done, client authentication, mssql and mysql wrapper, wrote some methods for managing OsaFlyff's database. I'll write the methods to manage official files later. Did remote program control, such as starting a new process, ending a process that's running, or starting a process that restarts every time the process is ended.

 

[ObjectOriented]

User authorization done.

---------- Post added at 09:16 PM ---------- Previous post was at 04:24 PM ----------

Jacob and I are working on making the web server use the back end to fetch data from MySQL/MSSQL. We need to write it so that the web server delays when connecting to the back end so that it gives the back end time to execute the MySQL/MSSQL queries. Here's a small sample. This is still very experimental for us.

<?php
error_reporting(0);
$first = 1026;
$last = 4096;
$tcp = stream_socket_client("tcp://127.0.0.1:3000", $errno, $errstr, 2);
	if($tcp)
	{
		fwrite($tcp, "bgx2011");
			if(fread($tcp, $first) == "0x00")
			{
				fwrite($tcp, "apixen bgx2011 127.0.0.1");
					if(fread($tcp, $first) == "0x00")
					{
					    fwrite($tcp, "0x09");
						$Result = fread($tcp, $last);
						if($Result == "0x00")
						{
							$Data = fread($tcp, $last);
							$Data = explode("#", $Data);
							echo '<table border="0">
								<tr>
									<th>Character</th>
									<th>Cluster</th>
									<th>Level</th>
									<th>Job</th>
									<th>Gender</th>
								</tr>
								<tr>
									<td>'.$Data[0].'</td>
									<td>'.$Data[1].'</td>
									<td>'.$Data[2].'</td>
									<td>'.$Data[3].'</td>
									<td>'.$Data[4].'</td>
								</tr>
							</table>
							';
						}
							else
						{	
							echo '<b>Could not fetch ranking.</b>';
						}					
					}
						else
					{
						echo '<b>Error logging in.</b>';
					}
			}
				else
			{
				echo '<b>Error confirming auth.</b>';
			}
		fclose();
	}
		else
	{
		echo '<b>Error connecting to socket server.</b>';
	}
?>

 

[Improved]

Looks very promising especially from what I saw on Teamviewer.

 

[ObjectOriented]

Going to recode to be able to handle web stress, we're also going to switch the web client from PHP to ASP.NET so we can integrate C# into it. It would still be nice to have a PHP web client done though if someone would like to help

 

[ObjectOriented]

I think I'm going to release the backend server, jacob is begging me not too though @.@

 

[Matt Clarke]

Unfortunately, we had to take some things out, like kicking everyone from the server and kicking a single player. Also the Mute, Freeze. This is because it is not stored in the database. (We don't think)