SteveDave

Thanks for the help guys, I think I realized what I'm doing wrong finally. Much appreciated! :thumbup:

This is definitely a simple fix but for some reason I'm stumped. I made a small mod on my game for players to talk through gang mail, where everyone can view and talk. The problem is that every time a ', ", \ is entered, another backslash (\) is posted behind. I referred back to forum posts and things like that, and I just don't see what I did wrong. 8|   function gang_gangmail() { global $db, $ir, $c, $userid, $gangdata, $bbc; if($_POST['gmtext']) { $picture = ($ir['display_pic']); $db->query("UPDATE users SET new_gangmail=new_gangmail+1 WHERE gang={$ir['gang']}"); $db->query("INSERT INTO gangmail VALUES('', {$gangdata['gangID']}, unix_timestamp(), '".$db->escape($_POST['gmtext'])."', '$picture', {$ir['userid']}, '{$ir['username']}', {$ir['user_level']}, {$ir['donatordays']})"); print "Your Gang Mail has been posted. <meta http-equiv='refresh' content='1;url=/yourgang.php?action=readgangmail' />"; } else { print "[b]Gang Mail[/b] <form action='yourgang.php?action=gangmail' method='post'> Text: <textarea name='gmtext' rows='8' cols='60'></textarea> <input type='submit' value='Send' /></form> "; } }   Any help would be greatly appreciated! :thumbsup:

Good points made, there are definitely other ways to go about this than disabling refresh I have added a basic captcha for now, will probably be changing it to reCaptcha as Drizzle suggested because it's by far the best I have seen. Spudinski, I really don't mind my players using refresh, it's auto-refresh programs or addons that I am concerned about. In my game there are items for refilling brave/energy so people have their auto-refreshers going (doing both crimes and training the gym). Captcha only does so much because most of the time these people are still at their computer, they're just doing other things like watching a movie or whatever else they feel like doing which makes it very unfair for those players who actually sit there for hours at a time playing the game like it's meant to be played. But I have already decided on some changes I will be making to slow this down if not stop it completely. You're right, the game needs to adapt.

Hello everyone, in hopes to stop all of the cheating going on in my game, I decided it's about time to disable refreshing. I've looked into this, and seen other games do it, but I haven't found any solid script or help for it yet. I imagine it would be a pretty simple javascript. I'm not too familiar with javascript, I have only used it a few times in my game so far. If someone could help me out with this I'd appreciate it very much. Auto refreshing has become a huge problem in many games, I think this could help a lot of people. If someone wants to throw it together and post it here as a free mod (I don't think it has been added yet) I'd gladly give them $5 for it. Thanks, Steve.

Nobody has posted here in a while but I was hoping someone could help me out here. For some reason I can't get ignore to work (separate mod). Here is what I have   function compose() { global $db,$ir,$h,$emos_toggle,$c,$userid; if($_POST['towho']) { $ig = mysql_query("SELECT * FROM ignore WHERE userid='{$_POST['towho']}' and blocked='{$ir['userid']}'") or die(mysql_error()); $i = mysql_fetch_assoc($ig); if($i['blocked'] == $ir['userid']) { echo 'This user has added you to their ignore list!'; $h->endpage(); exit; }   The error it gives me is: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'ignore WHERE userid='2' and blocked='1'' at line 1 Any idea why this is happening? I feel retarded for asking something that should be so simple. I must be missing something :huh:

I'd like to see this, I'm busy working on a ton of things but have been wanting to find time to work on a good forum. This could definitely save me the hassle.

Didn't work at first, just had to change send.php: if ($_GET['msg']) { mysql_query("INSERT INTO chat(`name`, `msg`, `time`) VALUES ('".$name."', '".$text."', UNIX_TIMESTAMP())"); to if ($_GET['name']) { $db->query("INSERT INTO chat VALUES ('','".$name."', '".$text."', UNIX_TIMESTAMP())"); and add a new field to the chat table called time, VARCHAR255. Other than that, nice basic little chat, with a little editing/new features it could be a nicer little chat. Thanks for sharing :)

Thanks for the kind offer but I just finished it, took me a lot longer than it would someone who knew more what they were doing but hey I think I learned a lot by taking 4 hours to do it (I'm a bit of a perfectionist sometimes and not being the best at this didn't help) ;)

Would you be able to do it identical to that? (Do you have any work I could possibly see before we make a deal?) I'm going to need this to look pretty identical, I wouldn't want to waste your time. ^^

Alright so I'm working on a few mods for my game at the moment but also want to get this template worked into the game, if I could supply the PSD, how much would you charge to code this?: My game pretty well already has the same look, it wouldn't need that much editing at all. I just have a hard time making things look nice :S Haha Edit: I'm looking for cheap work, I just figure someone better than me couple whip this up way quicker than me and I could save some time. If it's not going to be cheap I suppose I'll do it by myself.

First off, sorry for making a new thread for this but for some reason it kept logging me out when I tried to post in the original thread. This is a fix for Tonka's Ignore user mail mod for all of those who were having the same problem as me (If you ignored someone, they could still mail you but you couldn't mail them). I just changed a few things around because the fix was pretty obvious, it was just a bit backwards. [mccode v2] Ignore User Mail Go to the original thread (^ Link above) and follow those instructions, but replace: $select = sprintf(("SELECT `blocked` FROM `ignore` WHERE userid = %u AND blocked = %u"), $userid, $_GET['ID']); $q = $db->query($select); $r=$db->fetch_row($q); if($r['blocked']) { echo "This person has choosen to ignore mails from you. [url='mailbox.php']> Back[/url]"; $h->endpage(); exit; } with: $select = sprintf(("SELECT `userid` FROM `ignore` WHERE blocked = %u AND userid = %u"), $userid, $_GET['ID']); $q = $db->query($select); $r=$db->fetch_row($q); if($r['userid']) { echo "This person has choosen to ignore mails from you. [url='mailbox.php']> Back[/url]"; $h->endpage(); exit; } Like I said, just a few words changed. Hope it helps.

Is there a new version of this like you said you were making? Also, can you make it so you need a bunch of items to make something and not just two?

Thanks for the reply, I finally got the Captcha to work. Stupid mistake haha ^^

Hey guys, I just recently had someone come on my game and made over 35,000 accounts (I was gone for about 14 hours). I'm guessing they can't do that with Registration captcha turned on but it doesn't seem to work? I've tried registering about 5 times on my own game using the built in captcha and it tells me it's wrong every time. Does it usually work or is there something wrong with my game? Thanks guys, this is pretty urgent.. This person has done this to me before, I'm guessing they have something against me.

Re: Getting hacked (SQL Injection) Is there any fixes for this or has anyone released a secured forum?