banmanagement / banmanager-webui Goto Github PK

You forgot to add

$settings['iframe_protection'] = false; in the settings

Also skin for new username isnt working http://gyazo.com/f78ceaad6a740e6a64c7f2bd46a97ad3

You cant seem to edit/delete any of the log through the web or unban/unmute them through the web

Hi,

i have still problem with my password, i try again and again, but still can't get my admin panel. T_T
I go with step by step like tutorial, but password don't have access..

1. Clone this repository into your Nginx/Apache document root:
   git clone https://github.com/yeahwhat-mc/BanManager-WebUI.git /var/www/banmanager
2. Make sure cache is writeable:
   cd /var/www/banmanager
   chmod 777 cache/
3. Rename settingsRename.php to settings.php:
   cp settingsRename.php settings.php
4. Make sure settings file is writeable:
   chmod 777 settings.php
5. Open and adjust the settings and make sure you're entered $settings['password'].

I do this almost 10x for day, but i can't use my passsword.. T_T, any advice?

none of the columns sort. Good job so far getting it to at least connect.
I wished I had all the new permissions for v5 because as it stands, staff can ban staff... and bm.exempt.ban , etc don't stop bans.

I think it would be a good idea to use a PHP framework for a project of this size... (f.e. Laravel)

I was hoping this would have taken priority in the latest release, since not being able to use Display All and Past player bans for the sever to display an entire list makes the web UI about 3% useful the entire application is dependant on displaying all the recent activity, that's the entire point of having a web UI, the SQL query is still trying to load everything and timing out, come on guys.

First some information about the (soft/hard)ware environment i run/host this from.

Since i don't hire a Minecraft server, i have physical access to everything.
Both the webserver and Minecraft server are on the same computer.

-Hardware-
CPU: Intel i7-2600K (stock speed)
Mobo: ASUS P8Z77-V PRO
RAM: 4x4 GB G.Skill F3-12800CL9-4GBRL
GPU: GeForce GTX 670 (Gigabyte GV-N670OC-2GD)
HDD: 2x4 TB HGST HDS724040ALE640

-Software-
Platform: Windows
OS: Windows 8.1 Ultimate x64
Java: JRE/JDK version "1.8.0_31-b13" x64

-Webserver/Minecraft server-
For the webserver i currently use Apache 2.4.10, PHP 5.6.5 and MySQL 5.6.22
As for the Minecraft server: git-Spigot-c136710-350cb99 (MC: 1.8.3)

And the BanManager plugin: v5.1.1 / WebUI v1.3.0

-About the installation-
Installation/setting-up of Ban Management plugin, the MySQL database and WebUI frontend was straightforward and easy.

-The problems-
The problems i have are with the WebUI.

(changing certain fields)
Under both Google Chrome and Internet Explorer i can't seem to save the edited "Footer" "© Your Server 2015" field. When going back to the Main page the default footer is still there. I haven't tested other web browsers but i'm pretty sure its not a browser related problem.

(changing ban reasons)
Editing a ban reason via WebUI also doesn't work for me, whenever i change the ban reason field and try to apply the changes, a "{"error":"That record does not exist"}" appears.

I created a seperate MySQL database/user account (non-root and locally) and gave BanManager plugin all rights (except GRANT) to its own database. The tables are populated and there are no errors in the server console but i don't understand why i'm not able to change many fields in the WebUI =/

Hopefully you can help me out.

Kind regards,
copyitright alias ThisUsernameIsMine (on dev.bukkit.org)

Trying to add a server and getting the following error.

"Invalid response from server, try again
Response:"

There is nothing showing after response, no clue what is wrong. I just upgraded to BM v5 from v4, I'm using the same mysql settings as the old webui, table names are correct.

Hello, I'm getting "some error occurred during connection" under "past player bans" on my main page, and the web UI is not working. You can see it yourself at http://hub.obsidiancraft.com/bans

We installed the web-ui a few weeks ago, and it worked. Then it apparently randomly stopped working and this started happening about two weeks ago. Hasn't changed since then. I went through the index.php and I see that this is an SQL error, but I've checked my settings dozens of times and tried different information and I keep getting the same message on the site. It worked for about a week and then this happened.

Any help is appreciated, thanks!

http://i.imgur.com/iOOyyq4.png

The conversion took 16 hours, It converted most, Missed a few hundred IP's and a few bans for some reason I can't see what failed on the logs, Mark2 logging system is funky. This was a trial run, I setup the latest web UI (1.3.0) and added the converted database results, It seemed to load as the homepage works, Even though the "latest" bans are a year out of date, then I tried to view all results via /index.php?action=searchplayer&server=0&player=%25 Pressing "Display All" or clicking my Server name, Nothing loads, Turning on PHP warnings shows it Fails due to execution time. I run an older version of the WEB UI with V4 and it works fine, What gives? How can I fix this so its working?

Fatal error: Maximum execution time of 30 seconds exceeded in /home/tom/public_html/banmanager/index.php on line 414

I'm considering turning BanManager into an organisation, with a repo for the plugin, another for the web interface.

Would you be interested in joining it and becoming a maintainer of the web interface? Essentially make this the official repo.

Just thought I'd report this, since it isn't consistent with other bans and mutes.

http://unchainedmc.net/bans/
Look at the Recent Mutes for a player named "Certhex", and hover over the blue box to see the reason. It won't show the full reason, unlike every other player it seems.

For security purposes, although whilst the validation takes care of preventing all known injections, it would give others peace of mind if the queries were to use MySQLi's prepared statements.

Always i get this, when add server:

Invalid response from server, try again
Response: Unable to connect, check connection information is correct

and my remote connection is valid

Hey, I have issues with players with multiple accounts and multiple ips.

the enchantment would track all ips and all players whom join with any of the ips so for example:

**for the example i used names but the names will be the users UUID's

Theshadyonehd ip: 1.1.1.1
Theshadyonehd Ip: 1.1.1.1
Epic_ninja ip: 1.1.1.1
Theshadyonehd Ip: 1.1.1.2
shadyone ip 1.1.1.2
shadyone ip: 1.1.1.3
thisenchantment ip 1.1.1.3

Say we want to ban thisenchantment. we write (/banall thisenchantment hacking). this would ban all the above names and ips because they are linked in one way or another, by ip or UUID. then after the ban the plugin will scan the ips and UUID's to further ban other ip's and UUIDs linked to the players original account.

Hello,

It seems after a recent commit to the Web Interface that the Skins are no longer showing up on our Web Interface. http://nd2.tronopolis.net/banmanager

Tronopolis 2015 — — BanManager WebUI version GIT-2e25ff5

http://unchainedmc.net/bans/index.php?action=viewplayer&player=Aids__&server=0

It shows this user is banned via /bminfo, but clicking on him in the panel will show nothing.

Lately after updating it seems to have broken the showing of skins and player heads. If there is anything I can do on my side to fix this issue please let me know. The ban page is http://unchainedmc.net/bans2/

Sooo, now that things are settling a little :)

You put a bunch of caching code wrapped around the mysql functions, was that based on an actual performance need or was it purely speculative?
Just trying to gauge if it should be ripped out completely or just made optional ;)

Due to the nature of the long format in the database you need to enter an exact and correct IP address to make the search work.

Is there any way for "fuzzy searches" like: 192.168 or 82.212.221?

/cc @confuser

When I press the save button on the AdminCP it does not save it just does nothing(Yes I did give the files 777 permission). Also some bans have been duplicated showing the player who banned them and the Console banning them when it didn't. Anothing thing I found it when I try to delete a ban record from the web UI it says this
"{"error":"That record does not exist"}"

Using last banmanager dev build (#68) and last web ui.
the command /bminfo returns that player has some ban, warn or mute. When trying to delete them with the web ui, the result is that That record does not exist.

As title says, that's the error I get when I try to get to player details page.
Using Ban Management dev build 33 from the jenkins.

http://unchainedmc.net/bans/index.php?action=viewplayer&player=GoldenFirePro&server=0

This player along with many others has the Mute and Warning records messed up. If you look, it seems like it's mixing up who muted/banned the player with the person who unmuted/unbanned the player. This goes along with the warnings. I am sure that console hasn't warned or even muted a player.

When unmuting a player, it will change the date he was muted to the date he was unmuted on.
http://unchainedmc.net/bans/index.php?action=viewplayer&player=silly_string123&server=0

This certain player was a player that was muted before we converted to the UUID builds, if that matters.

This also happens when it's a tempmute, the muted on date becomes the date when he was unmuted.

Hello everyone!

I am writing this issue because I need help from the community. I cannot connect my server with WebManager at all. I have it setted up on domain1 (forum.polskasg.pl/bany) and my server is in another hosting aswell which has the mysql database. Its VPS so I have full access to my part of the machine. I tried to connect it with website many times, every single failed.

I literally do not know what to do. Please help me.

Screenshots:

1. My VPS MySQL my.cfg: http://gyazo.com/d6549c66966cc27d181afc2d751220ba
2. Communicate with error: http://gyazo.com/51f536a74e10bfce207a44994c5b7ae9
3. PhpMyAdmin Screenshot: http://gyazo.com/be4951e7fc0dc2857e570b7ca7f5ce57

If you need anything else from informations please request it in the responds.

The viewip page shows a list of associated accounts with that ip.

Many would view this as a security hole and it should be changed to be visible to logged in admins only.

It would be very nice to have the possibility for different accounts and to have the option for setting up different permissions for them. For example Unbanning as a seperate permisson, acess to the Admininterface ...

I updated the skins lines in settings.php to the following and skins do not show up:

// Skin service options
// ("%name%" is the placeholder for the player %name)
// ("%uuid%" is the placeholder for the player uuid)
$settings['skin']['helm'] = "https://crafatar.com/avatars/%uuid%?helm&size=24";
$settings['skin']['complete'] = "https://crafatar.com/renders/body/%uuid%?helm&scale=7";

I also did chmod 777 on the cache directory. I am using 1.2.0. Help?

Hello,

I am having an issue where the bans are not showing on the homepage or the footer. The footer is there on the Statistics page though.

http://prntscr.com/61f2ei
http://prntscr.com/61f32n

Would be cool to have an installer with UI to make setting this up easier for inexperienced users.

Overall I really do like this WebUI hotfix, though there are some odd bugs.

For instance the difference here between the v4 version:
Old version: http://unchainedmc.net/bans/index.php?action=viewplayer&player=bjb060700&server=0
New version: http://unchainedmc.net/bans2/index.php?action=viewplayer&player=bjb060700&server=0

If you look, the previous mute section for that player looks a bit weird, and the warning date is off. Would this be due to BanManagement or this new WebUI?

Hi, the console UUID needs to be stored somehow in the PHP, otherwise odd characters will be displayed if the console is actor on a ban.

When clicking the Display All button on the frontpage, it will show a MYSQL error. When refreshing, it is working as expected.

Error:
Uh oh, we've found an error.
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'WHERE warned LIKE '%%%' ORDER BY player_id ASC' at line 1

This issue seems to be cache related. When clearing the cache it will happen again.

For easy switching between services

E.g. Minotar, Crafatar etc

Looks like mySQL errors aren't be handled correctly? Possibly due to lack of input sanitisation?

http://bans.yeahwh.at/index.php?player=%3BSHOW+PROCESSES%3B&server=0&action=searchplayer

Own Ban only visible for the Ip which is associated with a banned Account. Only (Admins/) logged-in Users could see all Bans.

Hi there, I have this error in my WebUI when I access my MySQL DB from another host.
Example:
I install the Web UI on domain1.com/bans, and the database is hosted on domain2.com (port 3306). I create a database, bmbans, and I let the plugin fill the DB up. I then assigned user user1 to the DB bmbans. Then, I access domain1.com/bans/index.php?action=admin and login. I tried to add the MySQL host domain2.com with the username user1 and password (user password). It returned this response: Invalid response from server, try again
Response: Unable to connect, check connection information is correct

I have Remote MySQL allowed for the host domain1.com

(at least if it's possible and plausible)

Like issue #9 I also get this error.
http://snag.gy/ujqPR.jpg
I've checked over and over again and the data is correct :(

Banmanager: 5
WebUI: 1.2.0

Notice: Undefined index: bansTable in ajax/deleteban.php on line 31

Warning: mysqli_num_rows() expects parameter 1 to be mysqli_result, boolean given in ajax/deleteban.php on line 33
{"error":"That record does not exist"}

Im reciving an Uncaught error [200] on both the player search function and the 'past server bans'. I cant seem to find an error log, there is no error in the chrome dev console (incase of unreachable files).
The page can be found (bans.theendlessnet.uk)[here].
Thanks :)

• Update licence comments in files
• Rename licence.txt to LICENSE
• Remove requirement of link to frostcast.net in licence, requires far too much time to enforce which I don't currently have.
• Code formatting guidelines will be required. I.e. use spaces instead of tabs, JavaScript should follow https://github.com/bengourley/js-style-guide/
• Move css, fonts, img and js folders into an assets folder
• Code formatting
• Use a CSS preprocessor like Stylus, SASS or LESS?
• Use a template engine? => issue #21
• Add .jshintrc and .jscsrc files for JavaScript linting
• Use a package manager for dependencies. I've been out of the PHP community for quite some time now, are there any equivalents of NPM in PHP? I remember there being composer, but it wasn't that great back then. Is there a PHP equivalent of jshint/jscs for linting? We could use NPM but that adds a Node.js requirement to a PHP project which seems odd. => Bower
• Main project root is far too busy.
• Replace all the die('Hacking attempt') with something better, massive code smell. => issue #22
• Use semver for versions
• Grunt task runner (to compile assets, linting, check code, etc.)

Comment on other changes/questions here.

Hello, I am a staff member on Swag-craft, a.k.a. Imperial Networks. Recently I've noticed an issue regarding the Web Interface. If I select 'IP Address' next to the search box, and click 'Display All', BanManagement will show the UUID of the staff member who banned the player rather than their username. If I go into the detailed ban info of a specific IP Address however, it will show me the username of the staff member. An example of what I am trying to say can be found here.

I'm not sure what the exact version of the web interface we're using, however I do know that we use one of the 5.0 dev builds in-game and for the web interface. The footer does say this - I'm not sure if that would help, but I thought I'd may as well include it anyways.

Regards,
Tim.

http://prntscr.com/61gb44
http://prntscr.com/61gbyy

Now I am experiencing some weird "times" for previous mutes and bans...