MyAAC v1.0-beta

Minimum PHP version for this release is 8.1.

Added

• reworked Admin Panel (@Leesneaks, @gpedro, @slawkens)
  • updated to Bootstrap v4
  • new Menu
  • new Dashboard: statistics, server status
  • new Admin Bar showed on top when admin logged in
  • new page: Server Data, to reload server data
    • Towns, NPCs & Items are stored in permanent cache
  • new pages: mass account & teleport tools
  • changelogs editor
  • revised Accounts & Players editors
  • option to add/modify admin menus with plugins
  • option to enable/disable plugins
  • better, updated TinyMCE editor (v6.x)
    • with option to upload images
  • list of open source libraries used in project page
• auto-loading of themes, commands & pages from plugins/ folder. You need just to place them in correct folder and they will be loaded automatically - this allows better customization, without interfering with core AAC folders. This will allow in the future automatic updates for plugins as well the AAC as whole.
• config.php moved to Admin Panel -> Settings page
• new console script: aac - using symfony/console
  • usage: php aac (will list all commands by default)
  • example: php aac cache:clear
  • example: php aac plugin:install theme-example.zip
• replace POT Query Builder to Eloquent ORM. Not 100% yet - in some places there is still old $db approach used (@gpedro) (#230)
• brand new charming installation page (by @fernandomatos)
  • using Bootstrap
• new pages router: nikic/fast-route, allowing for better customisation
• Plugin cronjobs: central control of the cronjobs
• Guild Wars support (available as plugin)
• support for login and create account only by email (configurable)
  • with no need for account name
• Google ReCAPTCHA v3 support (available as plugin)
• automatically load towns names from .OTBM file
• support for Account Number
  • suggest account number option
• many new functions, hooks and configurables
• better Exception Handler (Whoops - https://github.com/filp/whoops)
• automated website tests (using Cypress)
• csrf protection (#235)
• option to restrict Page view to specified group of users (Not-Logged in, logged-in players, tutors, gamemasters etc.)
• phpdebug bar (http://phpdebugbar.com/). Activated if env == 'dev', can be also activated in production by enabling "enable_debugbar" in local config

Changed

• Composer and NPM is now used for external libraries like: Twig, PHPMailer, fast-route, jQuery, Bootstrap etc.
• mail support is disabled on fresh install, can be manually enabled by user
• disable add php pages in admin panel for security. Option to disable plugins upload
• visitors counter shows now user browser, and also if its bot
• changes in required and optional PHP extensions
• reworked Pages:
  • Bans
    • works now for TFS 1.x
  • Highscores
    • frags works for TFS 1.x
    • cached
  • Monsters
• moved pages to Twig:
  • experience stages
• update player_deaths entries on name change
• change_password email to be more informal

Fixed

• hundrets of bug fixes, mostly patched from 0.8, so it makes no sense writing them again here

MyAAC v0.8.17

Added

• TwigTypeCastingExtension (7181b98)

Fixed

• fix XSS in creatures.php (02eea95, @gesior)
• don't allow redirect to external website (ef62b53)
• change_info if account_country is disabled (62d3c19)

Changed

• use word-break: break-all in guilds description + character comment (191ad25)
• set default status_ip to 127.0.0.1, most server are hosted locally anyway (2793c41)

MyAAC v0.8.16

This is small release to fix a bug I introduced in the v0.8.15.

The problem was that part of the install script wasn't executed correctly, which resulted in missing character samples in database.

Fixed

• broken installation
• database and finish step warnings/errors (#245, @danilopucci)
• silently ignore if the hook does not exist

MyAAC v0.8.15

More security fixes, especially in bugtracker.

MyAAC v0.8.14

Security fixes.

Fixed

• XSS vulnerability in bugtracker (83a91ec)
• XSS vulnerability in forum (d1bc63d + 55dbade)
• Session Fixation (483155c)
• displaying ban info on account page (764db0c)

Changed

• Clear some additional cache keys - like database cache (4327b66)

MyAAC v0.8.13

Added

• latest client versions to config (765886f)
• patching from develop - twig context for hooks (f1670f4)

Fixed

• fixed XSS vulnerability in some pages (5c3b01a)

MyAAC v0.8.12

I've moved the repository back to my personal account. (Just so you know!)

I will also try to add git commits pointed to each change, lets see if you like it or not - you can comment in discussion, that will be created just after releasing this version :)

edit: link to discussion where you can vote: #228

Added

• forum: better error messages (Suggested by @anyeor) (34725e0)
• more support for GesiorAAC classes, so some of them will work with MyAAC (a8172a5)
• word-break on forum thread & reply (Suggested by @anyeor) (ce4aed0)

Fixed

• not working pages/links from database, introduced in 0.8.10 (Thanks to OtLand user - https://otland.net/members/0lo.99657/ for report) (1e874c7)
• it was possible to create topic in board that was closed, ommiting the error check (Thanks to @anyeor for report) (0d52978)
• PHP 8.2 compatibility - removed deprecated functions utf8_encode & utf8_decode (a338fd9)
• guild description not being correctly shown (Reported by @anyeor) (f2a3ec1, df32115)

Removed

• Some old code for verifying messages length (Reported by @anyeor) (df48363)
• some info about config failed to load, was never working (7a546e5)

MyAAC v0.8.11

Added

• new function from 0.9 - Cache::remember($key, $ttl, $callback)
• new characters page hooks
• line number & file to exception handler, to easier localize exceptions

Changed

• rename to .htaccess.dist, causes some problems on default setup
• removing unneccessary PHP closing tags to prevent potential issues (by @SRNT-GG)
• display warning if hook file does not exist

Fixed

• important: Not allow create char if limit is exceeded (by @anyeor) could have been used to spam database
• deleted chars: cannot change comment, name, gender, cannot create guild, cannot be invited, cannot accept invite, cannot be passed leadership to
• forum: quote and edit post buttons not being shown
• twig exception thrown when player does not exist, on character change comment (thanks @anyeor)
• BASE_DIR when accessing /tools
• do not display warning if HTTP_ACCEPT_LANGUAGE is not set

MyAAC v0.9.0-alpha

After 3 years again, it's time to release our latest work - MyAAC v0.9.0.

This time as alpha. Please not use in production server. Download & test & give feedback on what's working, what's not, and what's good about this release ;)

Added

• reworked Admin Panel (@Leesneaks, @gpedro, @slawkens)
  • updated to Bootstrap v4
  • new Menu
  • new Dashboard: statistics, server status
  • new Admin Bar showed on top when admin logged in
  • new page: Server Data, to reload server data
  • new pages: mass account & teleport tools
  • changelogs editor
  • revised Accounts & Players editors
  • option to add/modify menus with plugins
  • option to enable/disable plugins
  • better, updated TinyMCE editor (v6.x)
    • with option to upload images
  • list of open source libraries used in project
• brand new charming installation page (by @fernandomatos)
  • using Bootstrap
• new pages router: nikic/fast-route, allowing for better customisation
• Guild Wars support (available as plugin)
• support for login and create account only by email (configurable)
  • with no need for account name
• Google ReCAPTCHA v3 support (available as plugin)
• automatically load towns names from .OTBM file
• support for Account Number
  • suggest account number option
• many new functions, hooks and configurables
• better Exception Handler (Whoops - https://github.com/filp/whoops)
• add Cypress testing

Changed

• Composer is now used for external libraries like: Twig, PHPMailer, fast-route etc.
• mail support is disabled on fresh install, can be manually enabled by user
• disable add php pages in admin panel for security. Option to disable plugins upload
• visitors counter shows now user browser, and also if its bot
• changes in required and optional PHP extensions
• reworked Pages:
  • Bans
    • works now for TFS 1.x
  • Highscores
    • frags works for TFS 1.x
    • cached
  • creatures
• moved pages to Twig:
  • experience stages
• update player_deaths entries on name change
• change password email to be more informal

Fixed

• hundreds of bug fixes, mostly patched from 0.8, so it makes no sense writing them again here

MyAAC v0.8.10

Officially PHP 7.2.5 is now required, cause of Twig 2.x, unofficially it was required since 0.8.8
Most of the users have it anyway.

Rest of the changes are mostly bug-fixes.

Changed

• PHP 7.2.5 is now required, cause of Twig 2.x
• allow pages to be placed in templates folder, under pages/ subfolder

Fixed

• Twig error with global variable on create account
• links/redirects from facebook, etc. like ?fbclid=x
• do not allow to continue install when there is no server database imported
• cannot go forward when config.local.php cannot be saved
• when server uses another items serializer
• small bug on install - please fill all input