sniko

I'll check up in OPs site in a few days, and write a blog post regarding what we did.

You're using the wrong meme. Guest was correct.

I know Guest, I know! I did spend a lot of time looking into who did it, as I like to know the kind of person I'm dealing with; mind games :p (Although I failed on that part) Anyway, issue is hopefully resolved, and I'll be checking up on OPs site during the week, just to ensure.

After spending a few hours with the OP on Skype, I believe (90%) that I have found the hole. Read it here :) #trafficwhore.

Apologies for the late reply. After talking to Bennyh789, he's informed me of the glitches that have occurred in the copy he has. I shall (hopefully, it's hard to say for definite, due to work) patch it up this week, and reupload to the marketplace. I thank you Bennyh, for informing me.

I, too. -tooshort-

via dox? -tooshort-

In these kind of situations, exhaust all possibilities :)

I've not heard of this one before. Check your cpanel access logs, ftp accounts. Look for suspicious activity. Likelihood is, he has gained access to the back-end. If so, easily rectifiable - well, easier than finding the hole, if there was one.

Perhaps create some sort of setting array, with boolean options, instead. $spy_settings = array(); $spy_settings['donator_only'] = 1; /* Put 0 if not donator only */ if($spy_settings['donator_only'] AND $ir['donator_days'] <= 0) { echo 'This is a donator only feature.'; $h->endpage(); exit; }

I have a system on the marketplace which allows crons to be run off timestamp, if that's what you're after? Link to System. Generally speaking, 'cheap' is not good to host a game on, however, that's your call.

$list = mysql_query("SELECT name, email FROM ".$_POST['db1'].""); $mailList = array(); while($data = mysql_fetch_array($list)) { $mailList[$data['name']] =$data['email']; } echo ' var dump '; var_dump($mailList); echo ' var dump ';

Dropbox, or Google Drive both take a matter of seconds, if not, minutes for a signup ;)

Perhaps investigate here. I assume you have an app id, right?

  session_start is in globals.php Okay heredoc Okay Bad habit Okay My original point was to try and use the database (it would allow multiple uses of the hi-low script, without session timeout) If you load the script into Netbeans (for example), go to Source > Format, you will see.

True, however, If I spent $x donating to a game and x time playing it, to only get a message saying "We're going to change the game, and make it rounds based", I'd most likely quit. With unlimited stats, possibly change the datatype within the database, allocating more memory, thus, bigger values.

If you've players too high for anyone to catch up, and you reset them....You're going to have a bad time. - You will most likely destroy your own creation in 1 click. Perhaps introduce a version 2 of the game, a fresh start (whilst keeping your current version live) with new things?

I've a few issues to raise. No need for session_start(); No need to error_reporting on, on a live version (this should be covered with testing) Possibly adopt heredoc Few spelling errors Why global variables that are not being used? You're doubling memory with assigning global variables to local variables (see below); $guess = $_GET['guess']; It's exploitable, if you know how to alter session data. Your format is horrible, no offense. Perhaps check the contents of each $_SESSION, before bringing it into play in the script. Use mccode pre-defined functions (money_formatter) to echo out the winnings, etc. No idea what you were trying to achieve here. $_SESSION['winning'] = $_SESSION['winnings'] = 0; This will suffice for line 81; $_SESSION['winnings'] =+ 1000;   https://developers.google.com/speed/articles/optimizing-php

It looks cool, however, I think the standard for text based game designs is very graphical to compensate for the lack of 'interactivity'. Nevertheless, good luck with your project!

Because $fara=mysql_num_rows($pl_rank); echo"<tr><td align = 'left'><b>Game rank:</td><td align='left'>#".$fara."</b></td></tr> ";}   You're echoing the amount of rows.

If you want something to be 100% unique, reinvent the universe ;)

It was more rhetorical than a direct question :)

Work in Progress Also, why INT(11)? TINYINT(1) will suffice, wouldn't? (To hold Boolean values; 1 and 0)

More activity works for me, however, it takes a few moments to load.