fusionwowcms / fusioncms Goto Github PK
View Code? Open in Web Editor NEWA CMS for World of Warcraft private servers
License: GNU Affero General Public License v3.0
A CMS for World of Warcraft private servers
License: GNU Affero General Public License v3.0
Is your feature request related to a problem? Please describe.
I have deprecated sha_pass_hash
in battlenet_accounts
in TrinityCore, new installations don't have this column at all and instead salt
and verifier
columns are present (existing installations get to keep this column to migrate their old data but it is not used during authentication at all). Today I got a user report about failed logins (and crashes) when FusionCMS was used by that user to create accounts
Describe the solution you'd like
Switch to supported method of account creation
Describe alternatives you've considered
N/A (unless you count telling users to stop using your software as alternative?)
Additional context
SRP is now utilized by battlenet_accounts
using sha256 as hash function with these constants
srp_version = 1 (column in battlenet_accounts)
N = 86A7F6DEEB306CE519770FE37D556F29944132554DED0BD68205E27F3231FEF5A10108238A3150C59CAF7B0B6478691C13A6ACF5E1B5ADAFD4A943D4A21A142B800E8A55F8BFBAC700EB77A7235EE5A609E350EA9FC19F10D921C2FA832E4461B7125D38D254A0BE873DFC27858ACB3F8B9F258461E4373BC3A6C2A9634324AB
g = 2
Expected length of salt is 32 bytes, verifier 128 bytes
$h = gmp_import(hash('sha256', $salt . hash('sha256', strtoupper(hash('sha256', strtoupper($email), false) . ':' . substr($password, 0, 16)), true), true), 1, GMP_LSW_FIRST);
Additionally, using worldserver console commands to create battlenet accounts will instead create srp_version = 2 which uses a different algorithm to create verifier values (hash_pbkdf2
with sha512) which I will leave up to maintainers of this project to decide whether to support that instead of version 1 or not (compared to v1, v2 passwords are case sensitive and limited to 128 characters instead of 16)
Reference C++ code for v2
https://github.com/TrinityCore/TrinityCore/blob/139051b0550e1b3e34aef9fd40de50071ef69422/src/common/Cryptography/Authentication/SRP6.cpp#L207-L221
In the "players online" module, GMs are shown along with everyone else, even when they are invisible.
This can easily become a problem when trying to investigate suspect behavior, as the player doing something illicit can just check the online list and possibly see known GM chars online so they just stop whatever they're doing until the GM leaves again.
Although not in the traditional sense, this might be considered a security issue, since it hinders the ability to police activity on the server.
GM chars should not be shown in the "players online" list when invisible, although not showing GM chars at all is most likely easier and fits the bill quite as well.
The "players online" module may be disabled, but that's a workaround throwing away quite cool functionality.
I've tried resolving the problem myself, but the complexity of this project greatly surpasses my abilities with PHP.
when i change to google captcha v3 in ucp admin and press save. dont save correct and change to default imagen captcha
log-2024-01-20.txt
i have a question?. Are you planning to add captcha V3 to the website?
hi . when i want to login to admin panel i will see following error :
Template path: application/themes/admin/login.tpl
Error: ErrorException: Undefined array key "cdn" in /home/***/public_html/writable/cache/templates/d8be5b1fb6e0c72072b217a0b15ecee25e33316c_0.file.login.tpl.php:37
Stack trace:
#0 /home//public_html/writable/cache/templates/d8be5b1fb6e0c72072b217a0b15ecee25e33316c_0.file.login.tpl.php(37): CodeIgniter\Debug\Exceptions->errorHandler()
#1 /home//public_html/vendor/smarty/smarty/libs/sysplugins/smarty_template_resource_base.php(123): content_65d676f424ab04_64744510()
#2 /home//public_html/vendor/smarty/smarty/libs/sysplugins/smarty_template_compiled.php(114): Smarty_Template_Resource_Base->getRenderedTemplateCode()
#3 /home//public_html/vendor/smarty/smarty/libs/sysplugins/smarty_internal_template.php(217): Smarty_Template_Compiled->render()
#4 /home//public_html/vendor/smarty/smarty/libs/sysplugins/smarty_internal_templatebase.php(238): Smarty_Internal_Template->render()
#5 /home//public_html/vendor/smarty/smarty/libs/sysplugins/smarty_internal_templatebase.php(116): Smarty_Internal_TemplateBase->_execute()
#6 /home//public_html/application/libraries/Smartyengine.php(74): Smarty_Internal_TemplateBase->fetch()
#7 /home//public_html/application/libraries/Administrator.php(373): Smartyengine->view()
#8 /home//public_html/application/libraries/Administrator.php(40): Administrator->showLogIn()
#9 /home//public_html/system/core/Loader.php(1286): Administrator->__construct()
#10 /home//public_html/system/core/Loader.php(1084): CI_Loader->_ci_init_library()
#11 /home//public_html/application/third_party/MX/Loader.php(274): CI_Loader->_ci_load_library()
#12 /home//public_html/application/modules/admin/controllers/Edittheme.php(14): MX\MX_Loader->library()
#13 /home//public_html/system/CodeIgniter.php(416): EditTheme->__construct()
#14 /home//public_html/index.php(235): require('/home//...')
#15 {main}
anyone has exprince this error before ?
I can't go to the next step because the page doesn't load.
(The following modules are missing:
Fatal error: Uncaught Error: Call to undefined function apache_get_modules() in /www/wwwroot/wowhub.org/install/system.php:72 Stack trace: #0 /www/wwwroot/wowhub.org/install/system.php(23): Install->checkApacheModules() #14 /www/wwwroot/wowhub.org/install/system.php(319): Install->__construct() #2 {main} thrown in /www/wwwroot/wowhub.org/install/system.php on line 72
)
Everything of the installing process works fine, until the end:
I waited serveral hours, so i am sure this is not intended.
Do i miss something and can you help me find out whats wrong?
Thanks in advance
Option to select which core. Trinity/MangOS/et cetera
The EmuCoach repack uses a mop_auth database for authentication. This is where the installation fails because it is looking for specific tables and values within those tables. This causes importing data for authentication to fail.
Something went wrong:
Fatal error: Uncaught mysqli_sql_exception: BLOB, TEXT, GEOMETRY or JSON column 'location' can't have a default value in C:\xampp\htdocs\install\system.php:250 Stack trace: #0 C:\xampp\htdocs\install\system.php(250): mysqli->query('CREATE TABLE `s...') #1 C:\xampp\htdocs\install\system.php(215): Install->SplitSQL(Resource id #5) #2 C:\xampp\htdocs\install\system.php(19): Install->database() #3 C:\xampp\htdocs\install\system.php(318): Install->__construct() #4 {main} thrown in C:\xampp\htdocs\install\system.php on line 250
Tell me how to fix it?
I just don't really understand it yet
این میتواند یک ایده یا گزارش مشکل باشد.
برای چند ریلم کردن این پروژه مشکل وجود دارد
درحالی که Auth یکی میباشد و کارکتر و. جهان. جدا بعد از اضافه کردن ریلم 2 و 3 دچار خطا های فروان میشود که ماژول top و کنترل پنل از کار میوفتد.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.