The update of the kernel and system has brought significant changes both in the Linux kernel (kernel 3.2.+) or in the MySQL database, which has increased from version 5.1 to version 5.5 and is known for improvements, memory saving and significantly faster work with the database overall. Since I always do this action, only if I am directly at the box, if something happens, it happened with small problems that I dealt with for long nights, but in the end everything worked out thanks to my personal presence, so this action and my presence always pays off. The precision pod (the new version of Linux) is functional and really precise. It is also known for working in updated PHP, which is a bit more secure and faster, which will be known mainly on our new web interface, which completely relies on this technology.
Thanks to the updated PHP, I was finally able to provide the best possible security to the players using the PDO (PHP Data Objects) + Prepared Statements method. Together, these elements provide maximum protection against the last weakness of our login over the web, which is the danger of SQL Injection and also the rapid acceleration of actions. This hack method is already a thing of the past the Web Service System and login. If any player suspects that someone knows their password or just wants to re-secure their account against people who may know it, change your password immediately. New systems made up of HTTPS + PDO + Prepared Statement + password encryption via SH1 + strong passwords from users now form an insurmountable barrier to your accounts and passwords. Security for our players is a top priority for our server, as well as server crashes, which we have not seen in a few days and we have a new record in uptime server over 11 days in a row! It took many days to prepare and rewrite for this method for the entire 166 files with access to our database, but in the end we succeeded. Long days of toil and lamentation are in the past. I am just waiting for the completion of the main site from these boring and tedious folders, but even then it will be. It was necessary to rewrite every function that was connected to the database in some way, it was necessary to rewrite some of the functions, and therefore it took a little time, mainly due to tests and the addition of new functions. Next week, I will be deploying new features to the core, such as progressive team arena assignments and much more. However, I need to be there, because the updates will be more extensive, so I must have time to intervene immediately in case of problems, I will have time again next week. We thank the players for their patience.
Now let's take a closer look at what's new at Web Account Management for our server:
1) Completely revamped access to the database purely via PHP Data Objects (PDO) and Prepared Statements (against SQL Injection abuse poslední the last weakness), if you suspect that someone might have obtained a password or you just want to really protect it now against external attacks, I recommend changing the password immediately
2) Fixed cases when it was not possible to connect to the game or the web interface after changing the password za I recommend sending a new password
3) At the request of the players, a new character-to-character exchange service has been added pro an elaborate system for character-to-character exchange. The procedure is simple in four stages, where both players have to confirm the choice via the web interface and via e-mail.
4) At the request of the players added check before adding the character to the Character Auction na before adding the character you need to write an email that belongs to the account and then confirm via email the option to add the character to the Character Auction
5) Added expanding search filters for Online Players and Character Auction, in addition to clicking on items like Name, Level, etc., I also added certain filters for specific searches on request of the players
6) Before replacing a character, adding a character to the auction, moving or replacing a character, checks are made for membership in the guild or arena teams kontroly the player must not be in them before using these services.
7) After their successful auction, exchange of characters or moves, the friend list will be deleted at the request of the players
8) The option to change only gender has been removed součástí this service is part of the change of faction and due to incorrect functionality has been removed from the service permanently
9) If one of the characters uses services such as Character Auction, transfers or exchanges, these characters will not be in the list of characters for paid services until the service in which they are in has properly ended
10) Banned accounts will not be able to use auctions, transfers and exchanges due to possible abuse of these services for their benefit