• There is NO official Otland's Discord server and NO official Otland's server list. The Otland's Staff does not manage any Discord server or server list. Moderators or administrator of any Discord server or server lists have NO connection to the Otland's Staff. Do not get scammed!
  • If you're using Gesior 2012 or MyAAC, please review this thread for information about a serious security vulnerability and a fix.

MyAAC Global Layout

Lucas Giovanni

Lucas Giovanni

Active Member
Joined
Jan 15, 2016
Messages
9
Solutions
1
Reaction score
28
MyAAC Global Layout

Credits
Slawkens (MyAAC)
Lucas Giovanni (Updated MyAAC with Global Layout)

MyAAC v0.8.6

News
Changed box shadow image to css
Changed buttons, removed image and added by css
Created new buttons based on colors (green and red)
Added page load, configurable in config.php
Added status bar with configurable social networks
Added slide and collapse status bar, configurable in config.php
Added swipe effect in menu
Created client download page, configurable link in config.php
Created event calendar, getting information directly from events.xml
Char Bazaar with configurable rates in config.php
Changed login by email
Editable themebox
Themebox: discord, donate and search character
Banner starting on the news page
Updated font awesome
Global modifiers for characters and accounts
Being able to change position, town, coins and premium
New login page
news soon...


1.png2.png3.png4.png​
 

Attachments

  • myaac by lucas giovanni.rar
    39.6 MB · Views: 566 · VirusTotal
Leesne

Leesne

i r peekay
Joined
Dec 4, 2017
Messages
369
Solutions
35
Reaction score
221
Location
UK
You are missing the bcdiv.

you need to install this.

Lua: 
sudo apt install php7.0-bcmath
sudo apt install php-bcmath

depending on which version of php you use etc.. (If you break stuff not my fault, lookup bcmath php before running commands)
Post automatically merged:

I would be a bit cautious about using this on your servers currently.

I had a quick check of some of the new code in comparison to myaac and noticed a few lines of code that could potentially be exploitable. Bear in mind, it was me who found the last big exploit in myaac, which allowed users to take over servers if they knew what they were doing. (still in the sticky news at top)
I do NOT believe this to be intentional from Lucas.

Once I actually free up some time (I am currently not coding or working on any projects due to RL stuff.) I will have a proper check and install this on a test web server.
Lucas, I will drop you a quick PM but I honestly don't have time to go through it all.
 
Last edited:
Leesne

Leesne

i r peekay
Joined
Dec 4, 2017
Messages
369
Solutions
35
Reaction score
221
Location
UK
No worries Lucas, I found the github just now and had a quick check but I don't have any time spare to assist further.
It is what I expected just by viewing the code.

These are my current chars:
1646934767540.png

This is an example of a char you can add by sending false data to the server.
1646934995676.png

Its a good effort to get a Bazaar looking char trade system in MyAAC but to improve it you should look into adding more PHP server checks to data.
You can see examples of how to extra secure the pages with extra checks under these files:
github.com

myaac/system/pages/account at main · lucasgiovannibr/myaac

A free and open-source Automatic Account Creator (AAC) written in PHP - myaac/system/pages/account at main · lucasgiovannibr/myaac
github.com github.com

Hope that helps for now.. Good luck.
 
OP
OP
Lucas Giovanni

Lucas Giovanni

Active Member
Joined
Jan 15, 2016
Messages
9
Solutions
1
Reaction score
28
News
  • Fix Char Baazar
  • Achievements Page (File to configure /tools/achievements.php)
  • Achievements Points
  • Creatures Page
  • Spells Page (File to configure /tools/spells.json)
  • Gallery Page
  • Server Info Page
  • Online Page
  • Experience Table Page
  • Highscores Page
  • Polls Page
  • Guilds Page
  • Guild Wars Management
  • Bans List Page
  • Support List Page
  • Downloads Page
  • Event Schedule Page (data/XML/events.xml)
  • Install Myaac
  • Countdown server save
  • Countdown auctions
  • New widgets
 
drakylucas

drakylucas

Intermediate OT User
Joined
Dec 15, 2015
Messages
234
Solutions
7
Reaction score
119
Does it works with canary (otservbr) ? (without most of xmls). The original myaac doesn't load creatures, spells and stages for canary (because all is configured in Lua).

Pretty nice job! Amazing screenshots
 
OP
OP
Lucas Giovanni

Lucas Giovanni

Active Member
Joined
Jan 15, 2016
Messages
9
Solutions
1
Reaction score
28
drakylucas said:
Does it works with canary (otservbr) ? (without most of xmls). The original myaac doesn't load creatures, spells and stages for canary (because all is configured in Lua).

Pretty nice job! Amazing screenshots
Click to expand...
Yes is being tested with Canary. Creatures and spells I exported all from the official website, it's not importing directly from the server.
Post automatically merged:

Revamped installation page.

install-1.pnginstall-4.png
 
Last edited:
leik meris

leik meris

Active Member
Joined
Feb 17, 2010
Messages
74
Solutions
1
Reaction score
36
Odisk said:
why do I have this problem ?

I have xampp Php 5.6

OTX 3

View attachment 67037
Click to expand...

PHP: 
-- Table structure `boosted_creature`
CREATE TABLE IF NOT EXISTS `boosted_creature` (
    `boostname` TEXT,
    `date` varchar(250) NOT NULL DEFAULT '',
    `raceid` varchar(250) NOT NULL DEFAULT '',
    `looktype` int(11) NOT NULL DEFAULT "136",
    `lookfeet` int(11) NOT NULL DEFAULT "0",
    `looklegs` int(11) NOT NULL DEFAULT "0",
    `lookhead` int(11) NOT NULL DEFAULT "0",
    `lookbody` int(11) NOT NULL DEFAULT "0",
    `lookaddons` int(11) NOT NULL DEFAULT "0",
    `lookmount` int(11) DEFAULT "0",
    PRIMARY KEY (`date`)
) AS SELECT 0 AS date, "default" AS boostname, 0 AS raceid;

insert in data base
 
O

Odisk

New Member
Joined
Apr 6, 2010
Messages
6
Reaction score
0
leik meris said:
PHP: 
-- Table structure `boosted_creature`
CREATE TABLE IF NOT EXISTS `boosted_creature` (
    `boostname` TEXT,
    `date` varchar(250) NOT NULL DEFAULT '',
    `raceid` varchar(250) NOT NULL DEFAULT '',
    `looktype` int(11) NOT NULL DEFAULT "136",
    `lookfeet` int(11) NOT NULL DEFAULT "0",
    `looklegs` int(11) NOT NULL DEFAULT "0",
    `lookhead` int(11) NOT NULL DEFAULT "0",
    `lookbody` int(11) NOT NULL DEFAULT "0",
    `lookaddons` int(11) NOT NULL DEFAULT "0",
    `lookmount` int(11) DEFAULT "0",
    PRIMARY KEY (`date`)
) AS SELECT 0 AS date, "default" AS boostname, 0 AS raceid;

insert in data base
Click to expand...

Good
you Have query column 'timestamp' ?
 

Attachments

OP
OP
Lucas Giovanni

Lucas Giovanni

Active Member
Joined
Jan 15, 2016
Messages
9
Solutions
1
Reaction score
28
Odisk said:
Good
you Have query column 'timestamp' ?
Click to expand...
You need to create a column called timestamp in the record players table

SQL: 
ALTER TABLE `server_config` ADD `timestamp` TIMESTAMP on update CURRENT_TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP AFTER `value`;
 
Last edited:
D

DarkLua

New Member
Joined
Apr 29, 2019
Messages
24
Reaction score
3
Hey,

Clear installed TFS 1.4, it's scheme.

Which tables needed to be added in order to not get errors?

Also, setting password to an account won't hash it on the db but will fill it as a string , rendering the password creation system buggy.

Can you provide solution? thanks.
 

Attachments

M

Methxs

Member
Joined
Jun 20, 2020
Messages
24
Solutions
3
Reaction score
6
Location
México
DarkLua said:
Hey,

Clear installed TFS 1.4, it's scheme.

Which tables needed to be added in order to not get errors?

Also, setting password to an account won't hash it on the db but will fill it as a string , rendering the password creation system buggy.

Can you provide solution? thanks.
Click to expand...
SQL: 
CREATE TABLE IF NOT EXISTS `boosted_creature` (
    `boostname` TEXT,
    `date` varchar(250) NOT NULL DEFAULT '',
    `raceid` varchar(250) NOT NULL DEFAULT '',
    `looktype` int(11) NOT NULL DEFAULT "136",
    `lookfeet` int(11) NOT NULL DEFAULT "0",
    `looklegs` int(11) NOT NULL DEFAULT "0",
    `lookhead` int(11) NOT NULL DEFAULT "0",
    `lookbody` int(11) NOT NULL DEFAULT "0",
    `lookaddons` int(11) NOT NULL DEFAULT "0",
    `lookmount` int(11) DEFAULT "0",
    PRIMARY KEY  (`date`)
) AS SELECT 0 AS date, "default" AS boostname, 0 AS raceid;
 
D

DarkLua

New Member
Joined
Apr 29, 2019
Messages
24
Reaction score
3
Methxs said:
SQL: 
CREATE TABLE IF NOT EXISTS `boosted_creature` (
    `boostname` TEXT,
    `date` varchar(250) NOT NULL DEFAULT '',
    `raceid` varchar(250) NOT NULL DEFAULT '',
    `looktype` int(11) NOT NULL DEFAULT "136",
    `lookfeet` int(11) NOT NULL DEFAULT "0",
    `looklegs` int(11) NOT NULL DEFAULT "0",
    `lookhead` int(11) NOT NULL DEFAULT "0",
    `lookbody` int(11) NOT NULL DEFAULT "0",
    `lookaddons` int(11) NOT NULL DEFAULT "0",
    `lookmount` int(11) DEFAULT "0",
    PRIMARY KEY  (`date`)
) AS SELECT 0 AS date, "default" AS boostname, 0 AS raceid;
Click to expand...
Thanks, it helped solving the errors.

About the password saved on the DB as plain text and not encrypted. Any solution to save it as SHA1 as expected when creating new account/changing password?

both encryptionType, passwordType set to sha1 on config.lua

meanwhile i've changed to encrypt function to:
function encrypt($str)
{
return sha1($str);
}

Another question:
What is the best practice of modifying new created character's starting level and equipment?

Many thanks
 
Last edited:

Similar threads

nefinoo
  • Question
AAC Error to creat a new character with a new vocations.
Replies
5
Views
415
nefinoo
nefinoo
potinho
  • Question
AAC [Gesior2012] Bug on layout Lastest News
Replies
0
Views
156
potinho
potinho
Top