MyAAC v0.8.20

Small fix regarding the latest release and the linux system.

Download this one, instead of the 0.8.19 if you are using linux.

If you are using 0.8.19, make this update:

The fix is to make this change in the system/libs/hooks.php

Change

require_once LIBS . 'src/plugins.php';

Into:

require_once LIBS . 'src/Plugins.php';

Yeah, we just changed 'p' to 'P' - that's just case-sensitive nature of linux.

MyAAC v0.8.19

Another half year, another release.

Added

• syntactic sugar for db structure changes (e0036a3)
• add "None" vocation to highscores (7f47376)
• new hooks in account manage + create (d401781)
• new functions: getGuildNameById($id) + getGuildLogoById($id) + Plugins::installMenus($templateName, $menus, $clearOld = false) (de1bb37 + d1c5a18 + 5a953ce)

Changed

• set default encryption to sha1 (55b8645)
• prefer get_browser_real_ip() over REMOTE_ADDR (cause of Cloudflare and similar services) (b5bbae6)
• allow account_create_character_create even if account_mail_verify is activated (1edf883)
• better https detection (patched from develop) (d73aceb)
• require login before create new thread (#261, @anyeor)
• better tables.headline.html.twig (patched from 1.0) (71ef30d)

Fixed

• bans page fixed functions getPlayerNameByAccount + getPlayerNameById (d39386c)
• account verify - do not allow login without verified email (1edf883, Thanks @anyeor)
• if <flags> is not present in monster.xml (81b6652)
• $db->update when there is null value (1458b7a)
• error on $db __destruct saving current script name in CLI (01660bd)

MyAAC v1.0-RC

v1.0 Release Candidate

Changes since 1.0-beta:

Added

• Feat: Hooks priority (dc17b70)
• Make autoload of pages, commands and themes configurable (c1d4b4f)
• Fraggers in characters page for TFS 1.x and canary (42f99c3)
• New hooks: HOOK_INSTALL_FINISH, HOOK_ACCOUNT_CREATE_CHARACTER_* (08ac8eb, 45dda5e)

Changed

• Allow account_create_character_create even if account_mail_verify is activated (203e411)
• Create guild_rank entries, in case MySQL trigger not loaded (d9c1b25, 47a19e8)
• Set Admin Account verified by default (cd49dfc)
• Refactor account routes into sub folders (bdc0c43)
• Order towns by id (9ea2a50)
• Do not create news about myaac, if any news already exist (on installation (504242f)

Fixed

• Not working google recaptcha plugin (a1bcb21)
• Not working account create if account_country is disabled (933b681)
• Account verify - do not allow login without verified email (Thanks @anyeor, fcb13f3)
• Detect tools/ext exists on install to prevent broken installs (10a7397)
• Cache reloading each time page refreshes (ec96985)
• Highscores frags for TFS 1.x and canary (a04d186)
• Monsters page: monster not found exception (ef79b99)
• Fixed bug if <flags> are not present in monster.xml (57b47ab)
• fastRoute duplicate errors (4c0739d)
• useGuildNick displaying (0db0ec1)

MyAAC v0.8.18

Added

• hook in guilds page to support guild wars (f875f3c)

MyAAC v1.0-beta

Minimum PHP version for this release is 8.1.

Added

• reworked Admin Panel (@Leesneaks, @gpedro, @slawkens)
  • updated to Bootstrap v4
  • new Menu
  • new Dashboard: statistics, server status
  • new Admin Bar showed on top when admin logged in
  • new page: Server Data, to reload server data
    • Towns, NPCs & Items are stored in permanent cache
  • new pages: mass account & teleport tools
  • changelogs editor
  • revised Accounts & Players editors
  • option to add/modify admin menus with plugins
  • option to enable/disable plugins
  • better, updated TinyMCE editor (v6.x)
    • with option to upload images
  • list of open source libraries used in project page
• auto-loading of themes, commands & pages from plugins/ folder. You need just to place them in correct folder and they will be loaded automatically - this allows better customization, without interfering with core AAC folders. This will allow in the future automatic updates for plugins as well the AAC as whole.
• config.php moved to Admin Panel -> Settings page
• new console script: aac - using symfony/console
  • usage: php aac (will list all commands by default)
  • example: php aac cache:clear
  • example: php aac plugin:install theme-example.zip
• replace POT Query Builder to Eloquent ORM. Not 100% yet - in some places there is still old $db approach used (@gpedro) (#230)
• brand new charming installation page (by @fernandomatos)
  • using Bootstrap
• new pages router: nikic/fast-route, allowing for better customisation
• Plugin cronjobs: central control of the cronjobs
• Guild Wars support (available as plugin)
• support for login and create account only by email (configurable)
  • with no need for account name
• Google ReCAPTCHA v3 support (available as plugin)
• automatically load towns names from .OTBM file
• support for Account Number
  • suggest account number option
• many new functions, hooks and configurables
• better Exception Handler (Whoops - https://github.com/filp/whoops)
• automated website tests (using Cypress)
• csrf protection (#235)
• option to restrict Page view to specified group of users (Not-Logged in, logged-in players, tutors, gamemasters etc.)
• phpdebug bar (http://phpdebugbar.com/). Activated if env == 'dev', can be also activated in production by enabling "enable_debugbar" in local config

Changed

• Composer and NPM is now used for external libraries like: Twig, PHPMailer, fast-route, jQuery, Bootstrap etc.
• mail support is disabled on fresh install, can be manually enabled by user
• disable add php pages in admin panel for security. Option to disable plugins upload
• visitors counter shows now user browser, and also if its bot
• changes in required and optional PHP extensions
• reworked Pages:
  • Bans
    • works now for TFS 1.x
  • Highscores
    • frags works for TFS 1.x
    • cached
  • Monsters
• moved pages to Twig:
  • experience stages
• update player_deaths entries on name change
• change_password email to be more informal

Fixed

• hundrets of bug fixes, mostly patched from 0.8, so it makes no sense writing them again here

MyAAC v0.8.17

Added

• TwigTypeCastingExtension (7181b98)

Fixed

• fix XSS in creatures.php (02eea95, @gesior)
• don't allow redirect to external website (ef62b53)
• change_info if account_country is disabled (62d3c19)

Changed

• use word-break: break-all in guilds description + character comment (191ad25)
• set default status_ip to 127.0.0.1, most server are hosted locally anyway (2793c41)

MyAAC v0.8.16

This is small release to fix a bug I introduced in the v0.8.15.

The problem was that part of the install script wasn't executed correctly, which resulted in missing character samples in database.

Fixed

• broken installation
• database and finish step warnings/errors (#245, @danilopucci)
• silently ignore if the hook does not exist

MyAAC v0.8.15

More security fixes, especially in bugtracker.

MyAAC v0.8.14

Security fixes.

Fixed

• XSS vulnerability in bugtracker (83a91ec)
• XSS vulnerability in forum (d1bc63d + 55dbade)
• Session Fixation (483155c)
• displaying ban info on account page (764db0c)

Changed

• Clear some additional cache keys - like database cache (4327b66)

MyAAC v0.8.13

Added

• latest client versions to config (765886f)
• patching from develop - twig context for hooks (f1670f4)

Fixed

• fixed XSS vulnerability in some pages (5c3b01a)