• There is NO official Otland's Discord server and NO official Otland's server list. The Otland's Staff does not manage any Discord server or server list. Moderators or administrator of any Discord server or server lists have NO connection to the Otland's Staff. Do not get scammed!

Castro AAC

Plugin subscriptions are now done. You get a message if a plugin needs to get updated at startup

bDVNzQH.png
 
It says how many commits is behind, nice!
btw- Have you implemented some layout management (or plan to add it in the future)?
 
It says how many commits is behind, nice!
btw- Have you implemented some layout management (or plan to add it in the future)?
Anything you would like to see? I dont have any plans (mostly because I have no idea what I could add) but pull requests are always welcome
 
There is no need for a new templating engine right now. The performance bottleneck is on the Go <-> Lua conversion types right now (using reflection) the standard engine is very good. The syntax is easy and clean.

I have no plans for a new templating engine I think there is a need right now. Also some of those options you mentioned (quicktemplate) compiles to binary wich I am sure raises the entry barrier for the AAC.

But thanks for the suggestions. If In a future the template engine is causing performance problems I might switch it
 
Anything you would like to see? I dont have any plans (mostly because I have no idea what I could add) but pull requests are always welcome
Could you add a shop system like we discussed before? Maybe make it a little more advanced then the others, include discount codes - applying sales to items for 24 hours - purchasing a full "set" of items in one process, or include a "cart" to use before checkout.

Great work so far!

Edit: looks like you were doing it on the older version actually
I dont plan to spam :p

I made several layout changes and this is how th shop looks with the changes (yes. sidebar is not done)

94IoG57iK.png


0huBeWTT-.png


qsAS_mFSe.png


I also added some new lua functions.

About the release date... Well I still need to finish houses (I need someone with a populated houses table plx0r), paygol buypoints and guild wars
 
Last edited:
Could you add a shop system like we discussed before? Maybe make it a little more advanced then the others, include discount codes - applying sales to items for 24 hours - purchasing a full "set" of items in one process, or include a "cart" to use before checkout.

Great work so far!

Edit: looks like you were doing it on the older version actually

I am currently working on the shop. I will keep this thread updated with the progress

The thread is a bit messy. There are a lot of old pics from the previous "version" of this project. Sadly all of those are outdated
 
Fully configurable security headers are here. These come with default values (in case you dont know what these mean)

Code:
[Security]
  XSS = "1; mode=block"
  Frame = "DENY"
  ContentType = "nosniff"
  ReferrerPolicy = "origin"
  CrossDomainPolicy = "none"
  NonceEnabled = true
  Nonce = "6LfU6CkTAAAAAC2Qet7vJlgDtssPpbuFg0G9hBli"

  [Security.CSP]
    Default = ["none"]

    [Security.CSP.Frame]
      Default = []
      SRC = ["https://www.google.com"]

    [Security.CSP.Script]
      Default = ["self"]
      SRC = ["https://www.google.com", "https://code.jquery.com", "https://cdn.datatables.net", "https://www.gstatic.com"]

    [Security.CSP.Font]
      Default = ["self"]
      SRC = ["http://fonts.gstatic.com", "http://fonts.googleapis.com"]

    [Security.CSP.Connect]
      Default = ["self"]
      SRC = []

    [Security.CSP.Style]
      Default = ["unsafe-inline", "self"]
      SRC = ["http://fonts.googleapis.com", "https://cdn.datatables.net"]

    [Security.CSP.Image]
      Default = ["self"]
      SRC = []

So yeah. More security updates to come. The lua part uses prepared statements and the template engine scapes all the data. No need to worry about XSS or SQLi or MiM.

Almost 96% of the OpenTibia website lacks these headers.
 
Last edited:
Maybe add getPlayersOnline function?
 
Maybe add getPlayersOnline function?
There are a lot of functions that are just a single MySQL query. I might add them at a later stage.

However if you feel something mandatory is missing please post a github issue =)

The docs might be getting updates these days.
 
Back
Top