|
|
| Author |
Thread Statistics | Show CCP posts - 2 post(s) |
SentryRaven
Chaos Faction
   |
Posted - 2006.09.29 17:52:00 -
[1]
I have written a php/mysql online tracker that can be accessed from the IGB and keeps track which members are online and active and which have went into the abyss of inactivity.
The file can be found on SourceForge.net via the link:
http://sourceforge.net/projects/eveactive/
Have fun playing with the tool.
SentryRaven
Ship Idea: Small Freighters
EVE Activity Tracker |
SentryRaven
Chaos Faction
|
Posted - 2006.09.29 18:36:00 -
[2]
 Originally by: Jinx Barker
This indeed sounds like an excellent tool. However, I am aprehensive about downloading anything that might mess with my account. Sorry, but I am a paranoid bastard. What I will do is keep an eye on this thread, and see how things go, and if it is all kosher, then I will DL it as well.
Definatley a good tool. I wish CCP would implement something like this in game.
To take the fear away from you, this is not a tool that is used by the member, but an PHP script that is inserted into the corp homepage and accessed from the IGB. Since I do not take any account info from you or anything that the IGB doesnt allow me to take, like your name your picture or your corpname.... I cannot do any damage to you.
And if you are still not convinced, it's all opensource and php. Take a look and see yourself if something is wrong there.
To give a breakdown how it works.
You open your homepage (corp) and the script kicks in. it looks if you are already in the DB and if you are, it sets your last login date onto the homepage to the date we currently have. Now your director comes along and checks this member list in the IGB and sees: "Oh damn! Jinx hasnt been on for 10 days. What's up here?" So he knows that you havent opened the page from ingame for 10 days and can take appropriate steps.
That's all to the program. It doesnt take your account data at all.
Ship Idea: Small Freighters
EVE Activity Tracker |
SentryRaven
Chaos Faction
|
Posted - 2006.09.29 19:24:00 -
[3]
Originally by: Johnathan Roark
Id does look useful, I have tried installing it, but seams to not actually do anything.
Also, looking through the code, it does not appear to be very secure. No checks require a password that I can see in the code. Also, found at last one place that looks like an SQL injection attack could take place. Granted, Im not the best with MySQL or PHP, so...
How did you experience the "it does nothing"?
And where yould you insert those passwords?
Point to me where I have done something similar?
Ship Idea: Small Freighters
EVE Activity Tracker |
SentryRaven
Chaos Faction
|
Posted - 2006.09.29 19:28:00 -
[4]
Originally by: SwindonBadger
lol help marko might see me at the roids! please tell me the code dosnt show how many roids u popped./
Doesnt record location or anything with asteroids..
Ship Idea: Small Freighters
EVE Activity Tracker |
SentryRaven
Chaos Faction
|
Posted - 2006.09.29 22:15:00 -
[5]
Originally by: Ocularis
Originally by: SentryRaven
Point to me where I have done something similar as a "injection attack"?
From his post I would assume he means there is a part of your code that is "open" to an sql injection attack, not intentually done on your part as a way for you to exploit the details, but that another user could try and use this to exploit the sql database behind the scenes.
Ive not looked at the code yet myself so cant point you to where I would say the problem could happen.
Then I'd love to know how to fix it :)
Ship Idea: Small Freighters
EVE Activity Tracker |
SentryRaven
Chaos Faction
|
Posted - 2006.10.05 12:54:00 -
[6]
Originally by: evistin
This is an honset and good software, I am looking at it right now, and its worth the effort and time to have a serious look at it. If you honsetly worried about an attack via this method, you should also have the know how on how to put security around it.
And if you know a way to improve the security spects, then please visit the Sourceforge project and give me some hints at how to. :)
Ship Idea: Small Freighters
EVE Activity Tracker |
SentryRaven
Chaos Faction
|
Posted - 2006.10.05 17:49:00 -
[7]
Originally by: zyphen****
you need hosting for this? to display links for download or patch notes etc or are you going to get one?
It is already up on SourceForge, thank you.
Linkage
And about that latin charset. The DB I use is some months old and I imported it from a MS Access DB so it's why it may be borked. Sorry, I'll take care of that once I am back from Vacation.
Ship Idea: Small Freighters
EVE Activity Tracker |
SentryRaven
Chaos Faction
|
Posted - 2006.10.06 09:29:00 -
[8]
span style= font-size:7pt i Edited by: SentryRaven on 06/10/2006 09:31:45 /i /span br BLOCKQUOTE font class=quote size=9px face= Verdana img src= /images/icon_quote_message.gif border= 0 b Originally by: /b i Numinos /i hr height=1 noshade br br but i stil didnt get how i actually works. am i as the added recruit director supposed to flagg all members i see in corpchat by clickin on active ? or are they supposed to visit this site via IGB once they are online and the site will recognize that automaticly? or its just them beeing simply online, wich flags em active dunno somehow magic [8 ] ? br hr height=1 noshade /font /BLOCKQUOTE br br Either you can use the index.php for that purpose or include the user.php somewhere in your index.php, to generate a user header with image corp and whatever. br br The main block is this: br br $sql = UPDATE br MembersMain br SET br LastUpdate = Now br WHERE br Name = .$_SERVER[ HTTP_EVE_CHARNAME."'";
$result = mysql_query($sql) OR die(mysql_error());[/code]
If that passage is somewhere on the index.php of your IGB website, then this piece of code will update the entry of a member once he opens the website in his IGB. Either this way or by editing the member and checking the box "mark as active" you will update their account with the current timestamp.
Quote:
then, the main difference between ure screenshot and my IGB is, that i dont have a "PPP" and "viev ppp log" section on the /members.php site.
any idea whats wrong?
PPP and viewPPP log are functions that my corp has. PPP stands for "Participation Points Program", a system where we reward people for coming to corp ops. However this function is useless for most members, so I removed it from my opensource. Nothing wrong here...
Ship Idea: Small Freighters
EVE Activity Tracker |
SentryRaven
Chaos Faction
|
Posted - 2006.10.06 09:34:00 -
[9]
br br Either you can use the index.php for that purpose or include the user.php somewhere in your index.php, to generate a user header with image corp and whatever. br br The main block is this: br br $sql = UPDATE br MembersMain br SET br LastUpdate = Now br WHERE br Name = .$_SERVER[ HTTP_EVE_CHARNAME."'";
$result = mysql_query($sql) OR die(mysql_error());[/code]
If that passage is somewhere on the index.php of your IGB website, then this piece of code will update the entry of a member once he opens the website in his IGB. Either this way or by editing the member and checking the box "mark as active" you will update their account with the current timestamp.
Quote:
then, the main difference between ure screenshot and my IGB is, that i dont have a "PPP" and "viev ppp log" section on the /members.php site.
any idea whats wrong?
PPP and viewPPP log are functions that my corp has. PPP stands for "Participation Points Program", a system where we reward people for coming to corp ops. However this function is useless for most members, so I removed it from my opensource. Nothing wrong here...
Ship Idea: Small Freighters
EVE Activity Tracker |
SentryRaven
Chaos Faction
|
Posted - 2006.10.06 10:08:00 -
[10]
Edited by: SentryRaven on 06/10/2006 10:09:33
Originally by: Huitzilopochtli Tlaloc
Sentry raven,
I deleted parts of your post that were behaving odly, They did not break any of the rules, but were creating some sort of bug on the forums and were making no sence (therfore similar to spamming).
Huitzilopochtli Tlaloc - [email protected]
That was why I wrote you guys an email.... thought you could fix it... but meh ok... will have to contact that dude another way....
@Nu:
in the user.php look out for the lines 90 - 96. That code sniplet is the part where the php site updated the user account in your DB with a current timestamp. If you add that somewhere to your index.php you have for your website and you have both Tables in the same DB, it should work....
Or you can edit the member and activate the checkbox: "mark as active"
Ship Idea: Small Freighters
EVE Activity Tracker |
|
|
|
|
| |
|