MyAAC v0.8.17

Added

• TwigTypeCastingExtension (7181b98)

Fixed

• fix XSS in creatures.php (02eea95, @gesior)
• don't allow redirect to external website (ef62b53)
• change_info if account_country is disabled (62d3c19)

Changed

• use word-break: break-all in guilds description + character comment (191ad25)
• set default status_ip to 127.0.0.1, most server are hosted locally anyway (2793c41)

MyAAC v0.8.16

This is small release to fix a bug I introduced in the v0.8.15.

The problem was that part of the install script wasn't executed correctly, which resulted in missing character samples in database.

Fixed

• broken installation
• database and finish step warnings/errors (#245, @danilopucci)
• silently ignore if the hook does not exist

MyAAC v0.8.15

More security fixes, especially in bugtracker.

MyAAC v0.8.14

Security fixes.

Fixed

• XSS vulnerability in bugtracker (83a91ec)
• XSS vulnerability in forum (d1bc63d + 55dbade)
• Session Fixation (483155c)
• displaying ban info on account page (764db0c)

Changed

• Clear some additional cache keys - like database cache (4327b66)

MyAAC v0.8.13

Added

• latest client versions to config (765886f)
• patching from develop - twig context for hooks (f1670f4)

Fixed

• fixed XSS vulnerability in some pages (5c3b01a)

MyAAC v0.8.12

I've moved the repository back to my personal account. (Just so you know!)

I will also try to add git commits pointed to each change, lets see if you like it or not - you can comment in discussion, that will be created just after releasing this version :)

edit: link to discussion where you can vote: #228

Added

• forum: better error messages (Suggested by @anyeor) (34725e0)
• more support for GesiorAAC classes, so some of them will work with MyAAC (a8172a5)
• word-break on forum thread & reply (Suggested by @anyeor) (ce4aed0)

Fixed

• not working pages/links from database, introduced in 0.8.10 (Thanks to OtLand user - https://otland.net/members/0lo.99657/ for report) (1e874c7)
• it was possible to create topic in board that was closed, ommiting the error check (Thanks to @anyeor for report) (0d52978)
• PHP 8.2 compatibility - removed deprecated functions utf8_encode & utf8_decode (a338fd9)
• guild description not being correctly shown (Reported by @anyeor) (f2a3ec1, df32115)

Removed

• Some old code for verifying messages length (Reported by @anyeor) (df48363)
• some info about config failed to load, was never working (7a546e5)

MyAAC v0.8.11

Added

• new function from 0.9 - Cache::remember($key, $ttl, $callback)
• new characters page hooks
• line number & file to exception handler, to easier localize exceptions

Changed

• rename to .htaccess.dist, causes some problems on default setup
• removing unneccessary PHP closing tags to prevent potential issues (by @SRNT-GG)
• display warning if hook file does not exist

Fixed

• important: Not allow create char if limit is exceeded (by @anyeor) could have been used to spam database
• deleted chars: cannot change comment, name, gender, cannot create guild, cannot be invited, cannot accept invite, cannot be passed leadership to
• forum: quote and edit post buttons not being shown
• twig exception thrown when player does not exist, on character change comment (thanks @anyeor)
• BASE_DIR when accessing /tools
• do not display warning if HTTP_ACCEPT_LANGUAGE is not set

MyAAC v0.9.0-alpha

After 3 years again, it's time to release our latest work - MyAAC v0.9.0.

This time as alpha. Please not use in production server. Download & test & give feedback on what's working, what's not, and what's good about this release ;)

Added

• reworked Admin Panel (@Leesneaks, @gpedro, @slawkens)
  • updated to Bootstrap v4
  • new Menu
  • new Dashboard: statistics, server status
  • new Admin Bar showed on top when admin logged in
  • new page: Server Data, to reload server data
  • new pages: mass account & teleport tools
  • changelogs editor
  • revised Accounts & Players editors
  • option to add/modify menus with plugins
  • option to enable/disable plugins
  • better, updated TinyMCE editor (v6.x)
    • with option to upload images
  • list of open source libraries used in project
• brand new charming installation page (by @fernandomatos)
  • using Bootstrap
• new pages router: nikic/fast-route, allowing for better customisation
• Guild Wars support (available as plugin)
• support for login and create account only by email (configurable)
  • with no need for account name
• Google ReCAPTCHA v3 support (available as plugin)
• automatically load towns names from .OTBM file
• support for Account Number
  • suggest account number option
• many new functions, hooks and configurables
• better Exception Handler (Whoops - https://github.com/filp/whoops)
• add Cypress testing

Changed

• Composer is now used for external libraries like: Twig, PHPMailer, fast-route etc.
• mail support is disabled on fresh install, can be manually enabled by user
• disable add php pages in admin panel for security. Option to disable plugins upload
• visitors counter shows now user browser, and also if its bot
• changes in required and optional PHP extensions
• reworked Pages:
  • Bans
    • works now for TFS 1.x
  • Highscores
    • frags works for TFS 1.x
    • cached
  • creatures
• moved pages to Twig:
  • experience stages
• update player_deaths entries on name change
• change password email to be more informal

Fixed

• hundreds of bug fixes, mostly patched from 0.8, so it makes no sense writing them again here

MyAAC v0.8.10

Officially PHP 7.2.5 is now required, cause of Twig 2.x, unofficially it was required since 0.8.8
Most of the users have it anyway.

Rest of the changes are mostly bug-fixes.

Changed

• PHP 7.2.5 is now required, cause of Twig 2.x
• allow pages to be placed in templates folder, under pages/ subfolder

Fixed

• Twig error with global variable on create account
• links/redirects from facebook, etc. like ?fbclid=x
• do not allow to continue install when there is no server database imported
• cannot go forward when config.local.php cannot be saved
• when server uses another items serializer
• small bug on install - please fill all input

MyAAC v0.8.9

Added

• You can now disable server status checking for testing purposes, useful for local testing when there is no server running
  • with this, the page won't need 2 seconds to load
  • set status_enabled to false in config.php
• new buttons code for tibiacom template, can create button with any text
• patched some small changes from develop branch

Changed

• add .git to denied folders in nginx-sample.conf
• plugins folder is now accessible from outside
• add plugins folder to twig search paths

Fixed

• player save on tfs 1.5 with new ipv6
• more php 8.x compatibility
• rel path for exception message, causing message to be not in red background