sniko

After spending a few hours with the OP on Skype, I believe (90%) that I have found the hole. Read it here :) #trafficwhore.

Apologies for the late reply. After talking to Bennyh789, he's informed me of the glitches that have occurred in the copy he has. I shall (hopefully, it's hard to say for definite, due to work) patch it up this week, and reupload to the marketplace. I thank you Bennyh, for informing me.

I, too. -tooshort-

via dox? -tooshort-

In these kind of situations, exhaust all possibilities :)

I've not heard of this one before. Check your cpanel access logs, ftp accounts. Look for suspicious activity. Likelihood is, he has gained access to the back-end. If so, easily rectifiable - well, easier than finding the hole, if there was one.

Perhaps create some sort of setting array, with boolean options, instead. $spy_settings = array(); $spy_settings['donator_only'] = 1; /* Put 0 if not donator only */ if($spy_settings['donator_only'] AND $ir['donator_days'] <= 0) { echo 'This is a donator only feature.'; $h->endpage(); exit; }

I have a system on the marketplace which allows crons to be run off timestamp, if that's what you're after? Link to System. Generally speaking, 'cheap' is not good to host a game on, however, that's your call.

$list = mysql_query("SELECT name, email FROM ".$_POST['db1'].""); $mailList = array(); while($data = mysql_fetch_array($list)) { $mailList[$data['name']] =$data['email']; } echo ' var dump '; var_dump($mailList); echo ' var dump ';

Dropbox, or Google Drive both take a matter of seconds, if not, minutes for a signup ;)

Perhaps investigate here. I assume you have an app id, right?

  session_start is in globals.php Okay heredoc Okay Bad habit Okay My original point was to try and use the database (it would allow multiple uses of the hi-low script, without session timeout) If you load the script into Netbeans (for example), go to Source > Format, you will see.

True, however, If I spent $x donating to a game and x time playing it, to only get a message saying "We're going to change the game, and make it rounds based", I'd most likely quit. With unlimited stats, possibly change the datatype within the database, allocating more memory, thus, bigger values.

If you've players too high for anyone to catch up, and you reset them....You're going to have a bad time. - You will most likely destroy your own creation in 1 click. Perhaps introduce a version 2 of the game, a fresh start (whilst keeping your current version live) with new things?

I've a few issues to raise. No need for session_start(); No need to error_reporting on, on a live version (this should be covered with testing) Possibly adopt heredoc Few spelling errors Why global variables that are not being used? You're doubling memory with assigning global variables to local variables (see below); $guess = $_GET['guess']; It's exploitable, if you know how to alter session data. Your format is horrible, no offense. Perhaps check the contents of each $_SESSION, before bringing it into play in the script. Use mccode pre-defined functions (money_formatter) to echo out the winnings, etc. No idea what you were trying to achieve here. $_SESSION['winning'] = $_SESSION['winnings'] = 0; This will suffice for line 81; $_SESSION['winnings'] =+ 1000;   https://developers.google.com/speed/articles/optimizing-php

It looks cool, however, I think the standard for text based game designs is very graphical to compensate for the lack of 'interactivity'. Nevertheless, good luck with your project!

Because $fara=mysql_num_rows($pl_rank); echo"<tr><td align = 'left'><b>Game rank:</td><td align='left'>#".$fara."</b></td></tr> ";}   You're echoing the amount of rows.

If you want something to be 100% unique, reinvent the universe ;)

It was more rhetorical than a direct question :)

Work in Progress Also, why INT(11)? TINYINT(1) will suffice, wouldn't? (To hold Boolean values; 1 and 0)

More activity works for me, however, it takes a few moments to load.

  Are you implying you, or somebody you know, has made a little fortune with MafiaCreator? Donations = Profit. Business is about profit. No profit = No Business.

I'm not sure we fully understand eachother. For example, if someone is quite an AFK member, and trains their stats up, thinking "energy" will be refilled to maximum after x timeframe, and it hasn't - it may cause them to quit the game entirely, as they would think it's a glitch in the game mechanics (needing to be active to allow regains of stats).

Some users may come online to spend their will points, and go AFK for an hour or so (waiting for it to be refilled). As no pages are being requested, updates are not happening, therefore, it will update once when they log in. They soon realise they cannot go AFK and come back to train at full will points, and eventually, may quit. - - - Updated - - -   Some users may come online to spend their will points, and go AFK for an hour or so (waiting for it to be refilled). As no pages are being requested, updates are not happening, therefore, it will update once when they log in. They soon realise they cannot go AFK and come back to train at full will points, and eventually, may quit.