MyAAC v1.0-RC

v1.0 Release Candidate

Changes since 1.0-beta:

Added

• Feat: Hooks priority (dc17b70)
• Make autoload of pages, commands and themes configurable (c1d4b4f)
• Fraggers in characters page for TFS 1.x and canary (42f99c3)
• New hooks: HOOK_INSTALL_FINISH, HOOK_ACCOUNT_CREATE_CHARACTER_* (08ac8eb, 45dda5e)

Changed

• Allow account_create_character_create even if account_mail_verify is activated (203e411)
• Create guild_rank entries, in case MySQL trigger not loaded (d9c1b25, 47a19e8)
• Set Admin Account verified by default (cd49dfc)
• Refactor account routes into sub folders (bdc0c43)
• Order towns by id (9ea2a50)
• Do not create news about myaac, if any news already exist (on installation (504242f)

Fixed

• Not working google recaptcha plugin (a1bcb21)
• Not working account create if account_country is disabled (933b681)
• Account verify - do not allow login without verified email (Thanks @anyeor, fcb13f3)
• Detect tools/ext exists on install to prevent broken installs (10a7397)
• Cache reloading each time page refreshes (ec96985)
• Highscores frags for TFS 1.x and canary (a04d186)
• Monsters page: monster not found exception (ef79b99)
• Fixed bug if <flags> are not present in monster.xml (57b47ab)
• fastRoute duplicate errors (4c0739d)
• useGuildNick displaying (0db0ec1)

MyAAC v0.8.18

Added

• hook in guilds page to support guild wars (f875f3c)

MyAAC v1.0-beta

Minimum PHP version for this release is 8.1.

Added

• reworked Admin Panel (@Leesneaks, @gpedro, @slawkens)
  • updated to Bootstrap v4
  • new Menu
  • new Dashboard: statistics, server status
  • new Admin Bar showed on top when admin logged in
  • new page: Server Data, to reload server data
    • Towns, NPCs & Items are stored in permanent cache
  • new pages: mass account & teleport tools
  • changelogs editor
  • revised Accounts & Players editors
  • option to add/modify admin menus with plugins
  • option to enable/disable plugins
  • better, updated TinyMCE editor (v6.x)
    • with option to upload images
  • list of open source libraries used in project page
• auto-loading of themes, commands & pages from plugins/ folder. You need just to place them in correct folder and they will be loaded automatically - this allows better customization, without interfering with core AAC folders. This will allow in the future automatic updates for plugins as well the AAC as whole.
• config.php moved to Admin Panel -> Settings page
• new console script: aac - using symfony/console
  • usage: php aac (will list all commands by default)
  • example: php aac cache:clear
  • example: php aac plugin:install theme-example.zip
• replace POT Query Builder to Eloquent ORM. Not 100% yet - in some places there is still old $db approach used (@gpedro) (#230)
• brand new charming installation page (by @fernandomatos)
  • using Bootstrap
• new pages router: nikic/fast-route, allowing for better customisation
• Plugin cronjobs: central control of the cronjobs
• Guild Wars support (available as plugin)
• support for login and create account only by email (configurable)
  • with no need for account name
• Google ReCAPTCHA v3 support (available as plugin)
• automatically load towns names from .OTBM file
• support for Account Number
  • suggest account number option
• many new functions, hooks and configurables
• better Exception Handler (Whoops - https://github.com/filp/whoops)
• automated website tests (using Cypress)
• csrf protection (#235)
• option to restrict Page view to specified group of users (Not-Logged in, logged-in players, tutors, gamemasters etc.)
• phpdebug bar (http://phpdebugbar.com/). Activated if env == 'dev', can be also activated in production by enabling "enable_debugbar" in local config

Changed

• Composer and NPM is now used for external libraries like: Twig, PHPMailer, fast-route, jQuery, Bootstrap etc.
• mail support is disabled on fresh install, can be manually enabled by user
• disable add php pages in admin panel for security. Option to disable plugins upload
• visitors counter shows now user browser, and also if its bot
• changes in required and optional PHP extensions
• reworked Pages:
  • Bans
    • works now for TFS 1.x
  • Highscores
    • frags works for TFS 1.x
    • cached
  • Monsters
• moved pages to Twig:
  • experience stages
• update player_deaths entries on name change
• change_password email to be more informal

Fixed

• hundrets of bug fixes, mostly patched from 0.8, so it makes no sense writing them again here

MyAAC v0.8.17

Added

• TwigTypeCastingExtension (7181b98)

Fixed

• fix XSS in creatures.php (02eea95, @gesior)
• don't allow redirect to external website (ef62b53)
• change_info if account_country is disabled (62d3c19)

Changed

• use word-break: break-all in guilds description + character comment (191ad25)
• set default status_ip to 127.0.0.1, most server are hosted locally anyway (2793c41)

MyAAC v0.8.16

This is small release to fix a bug I introduced in the v0.8.15.

The problem was that part of the install script wasn't executed correctly, which resulted in missing character samples in database.

Fixed

• broken installation
• database and finish step warnings/errors (#245, @danilopucci)
• silently ignore if the hook does not exist

MyAAC v0.8.15

More security fixes, especially in bugtracker.

MyAAC v0.8.14

Security fixes.

Fixed

• XSS vulnerability in bugtracker (83a91ec)
• XSS vulnerability in forum (d1bc63d + 55dbade)
• Session Fixation (483155c)
• displaying ban info on account page (764db0c)

Changed

• Clear some additional cache keys - like database cache (4327b66)

MyAAC v0.8.13

Added

• latest client versions to config (765886f)
• patching from develop - twig context for hooks (f1670f4)

Fixed

• fixed XSS vulnerability in some pages (5c3b01a)

MyAAC v0.8.12

I've moved the repository back to my personal account. (Just so you know!)

I will also try to add git commits pointed to each change, lets see if you like it or not - you can comment in discussion, that will be created just after releasing this version :)

edit: link to discussion where you can vote: #228

Added

• forum: better error messages (Suggested by @anyeor) (34725e0)
• more support for GesiorAAC classes, so some of them will work with MyAAC (a8172a5)
• word-break on forum thread & reply (Suggested by @anyeor) (ce4aed0)

Fixed

• not working pages/links from database, introduced in 0.8.10 (Thanks to OtLand user - https://otland.net/members/0lo.99657/ for report) (1e874c7)
• it was possible to create topic in board that was closed, ommiting the error check (Thanks to @anyeor for report) (0d52978)
• PHP 8.2 compatibility - removed deprecated functions utf8_encode & utf8_decode (a338fd9)
• guild description not being correctly shown (Reported by @anyeor) (f2a3ec1, df32115)

Removed

• Some old code for verifying messages length (Reported by @anyeor) (df48363)
• some info about config failed to load, was never working (7a546e5)

MyAAC v0.8.11

Added

• new function from 0.9 - Cache::remember($key, $ttl, $callback)
• new characters page hooks
• line number & file to exception handler, to easier localize exceptions

Changed

• rename to .htaccess.dist, causes some problems on default setup
• removing unneccessary PHP closing tags to prevent potential issues (by @SRNT-GG)
• display warning if hook file does not exist

Fixed

• important: Not allow create char if limit is exceeded (by @anyeor) could have been used to spam database
• deleted chars: cannot change comment, name, gender, cannot create guild, cannot be invited, cannot accept invite, cannot be passed leadership to
• forum: quote and edit post buttons not being shown
• twig exception thrown when player does not exist, on character change comment (thanks @anyeor)
• BASE_DIR when accessing /tools
• do not display warning if HTTP_ACCEPT_LANGUAGE is not set