FastCoder Posted December 23, 2011 Share Posted December 23, 2011 (edited) I am selling a New Merit System with the option to add merits ingame through staff panel. This comes with Incremental and non incremental Upgrades [ATTACH=CONFIG]224[/ATTACH][ATTACH=CONFIG]225[/ATTACH][ATTACH=CONFIG]226[/ATTACH][ATTACH=CONFIG]227[/ATTACH][ATTACH=CONFIG]228[/ATTACH][ATTACH=CONFIG]229[/ATTACH] distributed by Fastcoder with consent of Venom Price Changed To $10 its more reasonable Demo :: deathvalley.co.cc user & pass: makewebgames Edited December 23, 2011 by FastCoder Quote Link to comment Share on other sites More sharing options...
bineye Posted December 23, 2011 Share Posted December 23, 2011 Is it really necessary to have to type the query from the staff panel? Surely you could populate a dropdown menu and use a text box to be able to select the stat and type in the amount it raises? Quote Link to comment Share on other sites More sharing options...
FastCoder Posted December 23, 2011 Author Share Posted December 23, 2011 Is it really necessary to have to type the query from the staff panel? Surely you could populate a dropdown menu and use a text box to be able to select the stat and type in the amount it raises? Yes that is needed as you can make it update any Collumn in the sql Quote Link to comment Share on other sites More sharing options...
bineye Posted December 23, 2011 Share Posted December 23, 2011 The reason I ask is because there are actually people out there that can't do SQL, and don't know the fields in the DB for MCC, and it's those people that would need this. As this is a basic enough mod, people with a good knowledge of PHP/SQL would make this themselves rather than pay $15 for it. It almost seems like a lose/lose situation for yourself. But I like to see everyone succeed, so I really hope you have good sales for this. Good luck. Quote Link to comment Share on other sites More sharing options...
FastCoder Posted December 23, 2011 Author Share Posted December 23, 2011 The reason I ask is because there are actually people out there that can't do SQL, and don't know the fields in the DB for MCC, and it's those people that would need this. As this is a basic enough mod, people with a good knowledge of PHP/SQL would make this themselves rather than pay $15 for it. It almost seems like a lose/lose situation for yourself. But I like to see everyone succeed, so I really hope you have good sales for this. Good luck. yes i told Venom that and it might get added so theres an example in the create page Quote Link to comment Share on other sites More sharing options...
Venom Posted December 23, 2011 Share Posted December 23, 2011 There are some examples on that page now to explain a bit about updating and inserting. Quote Link to comment Share on other sites More sharing options...
Dominion Posted December 23, 2011 Share Posted December 23, 2011 If I can run an sql from the staff panel what's to stop me dropping tables? Quote Link to comment Share on other sites More sharing options...
Venom Posted December 23, 2011 Share Posted December 23, 2011 If I can run an sql from the staff panel what's to stop me dropping tables? You can only use INSERT and UPDATE. If you are going to let someone into your staff panel, you should trust them in the first place. Quote Link to comment Share on other sites More sharing options...
Dominion Posted December 23, 2011 Share Posted December 23, 2011 You can only use INSERT and UPDATE. If you are going to let someone into your staff panel, you should trust them in the first place. You can do a lot of damage with just those two... you're being very optimistic to believe every staff member is 100% trustworthy. The people I trust that much would have access to phpmyadmin... Quote Link to comment Share on other sites More sharing options...
Venom Posted December 23, 2011 Share Posted December 23, 2011 You can do a lot of damage with just those two... you're being very optimistic to believe every staff member is 100% trustworthy. The people I trust that much would have access to phpmyadmin... Depends who you let on your staff team. I have staff permissions to choose which staff can go to what pages. If you dont trust someone, just create something along the lines of a permissions system. -_- What would your solution be then? -_- Any way of creating merits through the staff panel can do damage. Whether it is a single query input field, or different drop downs to put together a query. Quote Link to comment Share on other sites More sharing options...
Dominion Posted December 23, 2011 Share Posted December 23, 2011 Depends who you let on your staff team. I have staff permissions to choose which staff can go to what pages. If you dont trust someone, just create something along the lines of a permissions system. -_- I would assume all sites have some way to limit who is seeing what page even if it's an if() inside the staff file. What would your solution be then? -_- Any way of creating merits through the staff panel can do damage. Whether it is a single query input field, or different drop downs to put together a query. You're talking about a query that's built, and then sanitized as opposed to yours that is simply typed in then run. Anything can be manipulated sure, but allowing direct query input is something completely different. Quote Link to comment Share on other sites More sharing options...
Venom Posted December 23, 2011 Share Posted December 23, 2011 I would assume all sites have some way to limit who is seeing what page even if it's an if() inside the staff file. You're talking about a query that's built, and then sanitized as opposed to yours that is simply typed in then run. Anything can be manipulated sure, but allowing direct query input is something completely different. You don't have a solution then. Quote Link to comment Share on other sites More sharing options...
bineye Posted December 23, 2011 Share Posted December 23, 2011 You don't have a solution then. That's a harsh way of putting it. Creating a populated list limits what your staff members can actually do. Your query will already be coded into the php file and the inputs will change but a mere 2 words in the line. Yes, exploits are possible, but what out there isn't at risk to these? Putting a query line for freedom typing is a recipe for disaster. If you cannot see the problem, or a solution, perhaps selling this is a mistake at this point. Quote Link to comment Share on other sites More sharing options...
Dominion Posted December 23, 2011 Share Posted December 23, 2011 You don't have a solution then. Name of merit, Description, Dropdown of values you could add to (e.g. money, brave, maxbrave, energy etc...). Amount to update by. Then check it's something in the array of given values -> escape then name, and description, store it. When updating the user table to give the merit check what's saved to update in the database, and add that value to an update query. Just as it's done for crimes for example or how many crystals it takes to refill energy in game. No direct query input needed... Quote Link to comment Share on other sites More sharing options...
FastCoder Posted December 23, 2011 Author Share Posted December 23, 2011 (edited) Name of merit, Description, Dropdown of values you could add to (e.g. money, brave, maxbrave, energy etc...). Amount to update by. Then check it's something in the array of given values -> escape then name, and description, store it. When updating the user table to give the merit check what's saved to update in the database, and add that value to an update query. Just as it's done for crimes for example or how many crystals it takes to refill energy in game. No direct query input needed... it will be done now Edited December 23, 2011 by FastCoder Quote Link to comment Share on other sites More sharing options...
Venom Posted December 23, 2011 Share Posted December 23, 2011 Name of merit, Description, Dropdown of values you could add to (e.g. money, brave, maxbrave, energy etc...). Amount to update by. Then check it's something in the array of given values -> escape then name, and description, store it. When updating the user table to give the merit check what's saved to update in the database, and add that value to an update query. Just as it's done for crimes for example or how many crystals it takes to refill energy in game. No direct query input needed... Fine -_- I will do this. ;) And send it out to replace the 1.0/1.1 sold. Quote Link to comment Share on other sites More sharing options...
spikereloaded Posted January 5, 2012 Share Posted January 5, 2012 Fine -_- I will do this. ;) And send it out to replace the 1.0/1.1 sold. venom, will i be able to get a copy of the updated version...as i only brought i a couple of weeks ago?! Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.