Pre-CMS; Security & Speed.

Subway · Sep 5, 2011

Not bad from Scratch, and also design is simple.

Kryptos · Sep 5, 2011

Sorry, but the code is horrible and messy and it is far from 'easily-editable'.

Nonetheless, you did all this on your own and not based on anything, so congrats. You just need to get better at PHP, which I hope you do.

Good job.

-styla-boy- · Sep 5, 2011

Predict said:
Yep. Aslong as you use the columns which are missing from Phoenix DB. (which can be found in my database (1st post)).

Insert mail, varchar(100) into the user table?

Its in from the standart database. The varchar lenght was "20". I have edited to 100. Please post a edit for a no email verification. It doesnt work. On youre Site its without Email verification.. please post the codes to edit ._.

Sorry for bad english - im german

EDIT: @Kryptos the code is nice! You must copy & paste it to wordpad and copy it from there. Its a little bug

Gangnam · Sep 5, 2011

Its nice and all that, and I couldn't do it, but it didn't go down well with Zap users, did it...

And above all, if they don't like it, they won't play your hotel

Other than that, nice

blackpol · Sep 5, 2011

yeah... secured NOT :/:

Session hijacking is too easy :thumbup:

You dont even need SQL injections to hijack

- No session domain check
- No session token
- No check for magic_quotes (else stripslashes is dying for the script)
- No check for ascii special characters (mysql_real_string & htmlspecialchars isnt enough...)

All functions are public so you can call them by curl() or file_get_contents()

And much much more...

Guys have fun get your retro hacked!

-styla-boy- · Sep 6, 2011

blackpol said:
yeah... secured NOT :/:

Session hijacking is too easy
You dont even need SQL injections to hijack

- No session domain check
- No session token
- No check for magic_quotes (else stripslashes is dying for the script)
- No check for ascii special characters (mysql_real_string & htmlspecialchars isnt enough...)

All functions are public so you can call them by curl() or file_get_contents()

And much much more...

Guys have fun get your retro hacked!

Thanks for the information!
I would use this, but now i read this!
Sorry, i cant use a insecure cms.
My Hotel is hacked a lot of times, because all fckng cms have exploits -.-

AresCJ · Sep 6, 2011

-styla-boy- said:
Thanks for the information!
I would use this, but now i read this!
Sorry, i cant use a insecure cms.
My Hotel is hacked a lot of times, because all fckng cms have exploits -.-

Well fix them, ok?

blackpol · Sep 6, 2011

-styla-boy- said:
Thanks for the information!
I would use this, but now i read this!
Sorry, i cant use a insecure cms.
My Hotel is hacked a lot of times, because all fckng cms have exploits -.-

No probleme, all cms systems released have this probleme...
because they are all based on uber/phoenix or whatever.
This one too.. same classes, same functions only some changes

Merijn · Sep 6, 2011

Woohoo, finally something that's from scratch and not 'phoenix or whatever edittes!'

Thanks man, we need more people like you.

~

-styla-boy- · Sep 6, 2011

AresCJ said:
Well fix them, ok?

okay dude

LHaZze · Sep 7, 2011

Looks a like simpleness of it, but might need a little more. On the other hand. its good for users, and not too much. and its from scratch, so pretty good release.

Predict · Sep 9, 2011

LHaZze said:
Looks a like simpleness of it, but might need a little more. On the other hand. its good for users, and not too much. and its from scratch, so pretty good release.

I'm glad you like it.

Jaxite · Sep 9, 2011

I'm not overly keen on the design, however it is definately very fast and seems secure from what i've heard so far.

Thanks!

rafa95123 · Sep 10, 2011

Hey man, work's fine, but one thing not works for me...

I go to register, and i register, but don't send the data for database, and don't appear my user registered in Database... I'm use the Phoenix...

Help me?

FreedomSaint · Sep 11, 2011

I like the design but I hate the rest of it. Good job on the design. :]

rafa95123 · Sep 11, 2011

rafa95123 said:
Hey man, work's fine, but one thing not works for me...

I go to register, and i register, but don't send the data for database, and don't appear my user registered in Database... I'm use the Phoenix...

Help me?

Help me please D;

Sledmore · Sep 13, 2011

This is some nice CSS, good job with this!

Predict · Sep 13, 2011

Sledmore said:
This is some nice CSS, good job with this!

Probably the first positive comment I've seen in this thread.. lol

YungTmk · Sep 13, 2011

Looks nice so far its light/fast I just need some help setting the client up maby someone can help?

Predict · Sep 13, 2011

YungTmk said:
Looks nice so far its light/fast I just need some help setting the client up maby someone can help?

Sure thing.

Code:

<?php include('templates/include/global.php');

if (!LOGGED_IN) {
header("Location: " . WWW . "/"); exit; }

mysql_query("UPDATE users SET ip_last = '".$_SERVER["REMOTE_ADDR"]."' WHERE id = '".USER_ID."'");

mysql_query("UPDATE users SET auth_ticket = '".rand()."-".rand()."-".rand()."-".rand()."-".rand()."abcd' WHERE id = '".USER_ID."'");

$TICKET = mysql_result(mysql_query("SELECT auth_ticket FROM users WHERE id = '".USER_ID."'"), 0);

?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
        "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<!-- PRE-CMS -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head> 
<meta http-equiv="content-type" content="text/html; charset=utf-8" /> 
<title><?php echo NAME.' - Client'; ?></title> 

<script type="text/javascript"> 
var andSoItBegins = (new Date()).getTime();
var ad_keywords = "";
document.habboLoggedIn = true;
var habboName = "<?php echo USER_NAME; ?>";
var habboReqPath = "<?php echo WWW; ?>";
var habboStaticFilePath = "http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery";
var habboImagerUrl = "http://www.habbo.nl/habbo-imaging/";
var habboPartner = "";
var habboDefaultClientPopupUrl = "<?php echo WWW; ?>/client.php";
window.name = "habboMain";
if (typeof HabboClient != "undefined") { HabboClient.windowName = "ClientWnd"; }
</script>

<link rel="shortcut icon" href="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/v2/favicon.ico" type="image/vnd.microsoft.icon" /> 

<script src="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/static/js/libs2.js" type="text/javascript"></script>
<script src="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/static/js/visual.js" type="text/javascript"></script>
<script src="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/static/js/libs.js" type="text/javascript"></script>
<script src="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/static/js/common.js" type="text/javascript"></script>
<script src="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/static/js/fullcontent.js" type="text/javascript"></script>
<link rel="stylesheet" href="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/styles/style.css" type="text/css" />
<link rel="stylesheet" href="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/styles/buttons.css" type="text/css" />
<link rel="stylesheet" href="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/styles/boxes.css" type="text/css" />
<link rel="stylesheet" href="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/styles/tooltips.css" type="text/css" />
<link rel="stylesheet" href="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/styles/habboclient.css" type="text/css" />
<link rel="stylesheet" href="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/styles/habboflashclient.css" type="text/css" />
<script src="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/static/js/habboflashclient.js" type="text/javascript"></script>

<meta name="description" content="<?php NAME; ?> is a virtual world where you can meet and make friends. Make friends, join the fun, get noticed!" /> 

<meta name="keywords" content="<?php NAME; ?> hotel , virtual, world, social network, free, community, avatar, chat, online, teen, roleplaying, join, social, groups, forums, safe, play, games, online, friends, teens, rares, rare furni, collecting, create, collect, connect, furni, furniture, pets , room design, sharing, expression, badges, hangout, music, celebrity, celebrity visits, celebrities, mmo, mmorpg, massively multiplayer" /> 

<!--[if IE 8]>
<link rel="stylesheet" href="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/v2/styles/ie8.css" type="text/css" />
<![endif]--> 
<!--[if lt IE 8]>
<link rel="stylesheet" href="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/v2/styles/ie.css" type="text/css" />
<![endif]--> 
<!--[if lt IE 7]>
<link rel="stylesheet" href="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/v2/styles/ie6.css" type="text/css" />
<script src="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/static/js/pngfix.js" type="text/javascript"></script>
<script type="text/javascript">
try { document.execCommand('BackgroundImageCache', false, true); } catch(e) {}
</script>

<style type="text/css">
body { behavior: url(http://www.habbo.nl/js/csshover.htc); }
</style>
<![endif]--> 
<meta name="build" content="PRECMS" /> 
</head>

<noscript>
<meta http-equiv="refresh" content="0;url=/client/no.js" />
</noscript>
<link rel="stylesheet" href="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/v2/styles/habboclient.css" type="text/css" />
<link rel="stylesheet" href="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/v2/styles/habboflashclient.css" type="text/css" />
<script src="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/static/js/habboflashclient.js" type="text/javascript"></script>
<script type="text/javascript">
    FlashExternalInterface.loginLogEnabled = true;
    
    FlashExternalInterface.logLoginStep("web.view.start");
    
    if (top == self) {
        FlashHabboClient.cacheCheck();
    }
    var flashvars = {
            "client.allow.cross.domain" : "1", 
            "client.notify.cross.domain" : "1", 
            "connection.info.host" : "[B][COLOR="Red"]YOUR IP HERE[/COLOR][/B]", 
            "connection.info.port" : "30001", 
            "site.url" : "<?php echo WWW; ?>", 
            "url.prefix" : "<?php echo WWW; ?>", 
            "client.reload.url" : "<?php echo WWW; ?>/client.php", 
            "client.fatal.error.url" : "<?php echo WWW; ?>", 
            "client.connection.failed.url" : "<?php echo WWW; ?>", 
            "external.variables.txt" : "[B][COLOR="red"]EXTERNAL VARIABLES HERE[/COLOR][/B]", 
            "external.texts.txt" : "[B][COLOR="red"]EXTERNAL TEXTS HERE[/COLOR][/B]", 
            "productdata.load.url" : "[B][COLOR="red"]PRODUCTDATA HERE[/COLOR][/B]", 
            "furnidata.load.url" : "[B][COLOR="red"]FURNIDATA HERE[/COLOR][/B]", 
            "use.sso.ticket" : "1", 
            "sso.ticket" : "<?php echo $TICKET; ?>", 
            "processlog.enabled" : "1",
            "account_id" : "<?php echo USER_ID; ?>", 
            "client.starting" : "Loading.", 
            "flash.client.url" : "<?php echo WWW; ?>/client.php", 
            "user.hash" : "<?php echo md5(USER_ID); ?>", 
            "flash.client.origin" : "popup" 
    };
    var params = {
        "base" : "[B][COLOR="red"]LOCATION TO YOUR SWFS[/COLOR][/B]",
        "allowScriptAccess" : "always",
        "menu" : "false"                
    };
    
    if (!(HabbletLoader.needsFlashKbWorkaround())) {
    	params["wmode"] = "opaque";
    }
    
    var clientUrl = "[B][COLOR="red"]HABBO.SWF HERE[/COLOR][/B]";
    swfobject.embedSWF(clientUrl, "flash-container", "100%", "100%", "10.0.0", "http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/flash/expressInstall.swf", flashvars, params);

    window.onbeforeunload = unloading;
    function unloading() {
        var clientObject;
        if (navigator.appName.indexOf("Microsoft") != -1) {
            clientObject = window["flash-container"];
        } else {
            clientObject = document["flash-container"];
        }
        try {
            clientObject.unloading();
        } catch (e) {}
    }
</script>

<meta name="description" content="<?php NAME; ?> is a virtual world where you can meet and make friends. Make friends, join the fun, get noticed!" /> 

<meta name="keywords" content="<?php NAME; ?> hotel , virtual, world, social network, free, community, avatar, chat, online, teen, roleplaying, join, social, groups, forums, safe, play, games, online, friends, teens, rares, rare furni, collecting, create, collect, connect, furni, furniture, pets , room design, sharing, expression, badges, hangout, music, celebrity, celebrity visits, celebrities, mmo, mmorpg, massively multiplayer" /> 



<!--[if IE 8]>
<link rel="stylesheet" href="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/v2/styles/ie8.css" type="text/css" />
<![endif]-->
<!--[if lt IE 8]>
<link rel="stylesheet" href="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/v2/styles/ie.css" type="text/css" />
<![endif]-->
<!--[if lt IE 7]>
<link rel="stylesheet" href="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/v2/styles/ie6.css" type="text/css" />
<script src="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/static/js/pngfix.js" type="text/javascript"></script>
<script type="text/javascript">
try { document.execCommand('BackgroundImageCache', false, true); } catch(e) {}
</script>

<style type="text/css">
body { behavior: url(/js/csshover.htc); }
</style>
<![endif]-->
<meta name="build" content="PRECMS" />
</head>

<body id="client" class="flashclient">
<div id="overlay"></div>
<img src="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/v2/images/page_loader.gif" style="position:absolute; margin: -1500px;" />

<div id="overlay"></div>
<div id="client-ui" >
    <div id="flash-wrapper">
    <div id="flash-container">
        <div id="content" style="width: 400px; margin: 20px auto 0 auto; display: none">

<div class="cbb clearfix">
    <h2 class="title">Please update your Flash Player to the latest version.</h2>
    <div class="box-content">
            <p>You can install and download Adobe Flash Player here: <a href="http://get.adobe.com/flashplayer/">Install flash player</a>. More instructions for installation can be found here: <a href="http://www.adobe.com/products/flashplayer/productinfo/instructions/">More information</a></p>
            <p><a href="http://www.adobe.com/go/getflashplayer"><img src="http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/477/web-gallery/v2/images/client/get_flash_player.gif" alt="Get Adobe Flash player" /></a></p>
    </div>
</div>

        </div>
        <script type="text/javascript">
            $('content').show();
        </script>
        <noscript>
            <div style="width: 400px; margin: 20px auto 0 auto; text-align: center">
                <p>If you are not automatically redirected, please <a href="/client/nojs">click here</a></p>
            </div>
        </noscript>
    </div>
    </div>
	<div id="content" class="client-content"></div>            
</div>
    <div style="display: none">

<div id="habboCountUpdateTarget">
%hotel_status%
</div>
	<script language="JavaScript" type="text/javascript">
		setTimeout(function() {
			HabboCounter.init(600);
		}, 20000);
	</script>
    </div>
    <script type="text/javascript">
        RightClick.init("flash-wrapper", "flash-container");
        if (window.opener && window.opener != window && typeof window.opener.location.href != "undefined") {
            window.opener.location.replace(window.opener.location.href);
        }
        $(document.body).addClassName("js");
       	HabboClient.startPingListener();
    </script>

<script type="text/javascript">
    HabboView.run();
</script>

<script type="text/javascript">

  var _gaq = _gaq || [];
  _gaq.push(['_setAccount', 'UA-15697942-2']);
  _gaq.push(['_trackPageview']);

  (function() {
    var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
    ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
    var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
  })();

</script>

</body> 
</html>

Fill in the spaces which are in red. (scroll down)

Pre-CMS; Security & Speed.

Custom Title Activated

prjRev.com

Newbie Spellweaver

Web & Interaction Design

Junior Spellweaver

Newbie Spellweaver

Old Habbo Developer

Junior Spellweaver

Skilled Illusionist

Newbie Spellweaver

Goin Goin Gone!

Legendary Battlemage

Newbie Spellweaver

🚫

Newbie Spellweaver

🚫

Divine Celestial

Legendary Battlemage

Junior Spellweaver

Legendary Battlemage

RaGEZONE Sponsor

About RaGEZONE

Forum Statistics

RaGEZONE Partners