website PKOdev.NET website for Tales of Pirates Server

[V3ct0r 2,152]

Hello @dragontechi,

 

1) What link did you download PKOdev.NET Webiste?

2) As far as I understand, the miner appeared on different VPS. Are these VPS from the same or different providers? Are you using a reliable hosting provider?

3) What else do you install besides the website?

4) Where did you get the script in your post from?

 

Looks like this script download something from address 45.81.224.130 and send information about your PC to the Telegram bot with token 5086556714:AAF7DbEW7CWKb1GEIy6_inxVlrGJ39JUUBM and chat ID 552691400.

 

I have previously installed the site from the link in the first post, but had no problems. I also searched for some of the keywords in your script using Notepad++ but didn't find anything.

 

Hello @Mesut,

 

You need configure SMTP settings in the file inc.config.php:

	// SMTP settings (email) 
	'smtp' => array(
		
		// Login (e-mail)
		'login' => '',
		
		// Password
		'password' => '',
		
		// SMTP server host
		'host' => 'smtp.gmail.com',
		
		// SMTP server port
		'port' => '465',

	),

 

[Mesut 28]

thk u vector but im getting this error massage from this field on php file 

 

 

Warning: A non-numeric value encountered in C:\xampp\htdocs\pages\account\inc.restore.php on line 168
 

 

script in php line 168

$hash = md5($name + time());

Edited November 10, 2022 by Mesut

[champ 173]

8 hours ago, Mesut said:

thk u vector but im getting this error massage from this field on php file 

 

 

Warning: A non-numeric value encountered in C:\xampp\htdocs\pages\account\inc.restore.php on line 168
 

 

script in php line 168

$hash = md5($name + time());

Try to replace it to:

 $hash = md5($name . time());

 

time() method might also need to be casted to string before concatenation.

[Mesut 28]

i think im getting issue becuase of the value that restore my account email comes to my mail twice thats why i get this error.

[champ 173]

This particular warning is shown due to you using a plus sign rather than a dot to concatenate strings. PHP uses dots to do that (inherited from Pearl), this behaviour can be tested using a PHP compiler. I have attached two screenshots of me running tests using different PHP compilers (versions 7 and 8).

 

Using version 7 outputs the warning that you see, now if you upgrade to version 8 then the developers have explicitly converted this warning into an exception, so the code will not work (running this code on php < 7 should not show any errors, which could lead to invalid application logic behaviour).

[Mesut 28]

works great thk u.

 

.

 

Edited November 13, 2022 by Mesut

[filipe 1]

On 9/6/2021 at 9:20 AM, V3ct0r said:

Thank you!

Can you help me solving this?

Deprecated: Creation of dynamic property Smarty_Internal_Template::$compiled is deprecated in C:\xampp\htdocs\lib\smarty\sysplugins\smarty_internal_template.php on line 612

Line 612 =                 $this->$property_name = $value;

 

Block of code:

 

    public function __set($property_name, $value)

    {

        switch ($property_name) {

            case 'compiled':

            case 'cached':

            case 'compiler':

                $this->$property_name = $value;

                return;

            default:

                // Smarty property ?

                if (property_exists($this->smarty, $property_name)) {

                    $this->smarty->$property_name = $value;

                    return;

                }

        }

        throw new SmartyException("invalid template property '$property_name'.");

    }

 

[V3ct0r 2,152]

Hello @filipe,

 

what is your version of PHP? Looks like it is PHP 8.x, in which dynamic properties are deprecated.

 

But this website was developed and should be used with PHP version 7.x.

[estrangulador 1]

Ao abrir o Stall do web site!

Estou recebendo esse erro

 

Parse error: syntax error, unexpected ')' in C:\xampp\htdocs\class\stallclient\class.stallclient.php on line 168

 

 

Não sei onde encontrar a Key nesse arquivo StallServer.cfg não tenho ele!

 

 

 

[SolidusZA 3]

@V3ct0r hi there the site is all up and running linking to my databases all fine but it wont send the email?

 

I removed the captcha and have setup my smtp details but it doesnt send any email when using Forgot Password?

 

EDIT:

 

Fixed the captcha and captcha all working.

 

But emails not sending. Not sure why

 

EDIT x2:

 

Disabled the SSL in the phpmailer. that sorted it. its sending fine now

Edited July 3, 2023 by SolidusZA

[SolidusZA 3]

@V3ct0r is there a way to allow passwords to have special characters? it only allows a-Z and numbers

[V3ct0r 2,152]

Hello @SolidusZA,

 

Sorry for the late reply, maybe it will help someone else:

 

1) File \pages\inc.register.php, line ~87:

if (!preg_match('|^[A-Z0-9]+$|i', $password))

2) File  \pages\account\inc.changepass.php, line ~50:

if ( ($length < 5 || $length > 15) || !preg_match('|^[A-Z0-9]+$|i', $old_password) )

line ~72:

if(!preg_match('|^[A-Z0-9]+$|i', $new_password))

3) File \pages\account\inc.login.php, line ~455:

!preg_match('|^[A-Z0-9]+$|i', $password) )

 

All you need to do is modify the regular expression (|^[A-Z0-9]+$|i) for your requirements.

 

 

P.S. It is a bad design, I should have written a separate function for validating passwords.

[R95 0]

How to manage or update the news? can you share the guide?

[V3ct0r 2,152]

Hello @R95,

 

Log in using any GM account.

[R95 0]

Thank you so much! Well I have 1 more question V3ctor. The Original Password doesnt show in AccountServer DataBase when someone registers only the hashed passwords shows...

[V3ct0r 2,152]

On 2/23/2024 at 10:26 AM, R95 said:

Thank you so much! Well I have 1 more question V3ctor. The Original Password doesnt show in AccountServer DataBase when someone registers only the hashed passwords shows...

Hello @R95,

 

This is how it should be for safety reasons. Passwords should not be stored in clear text in the database; their hashes (MD5) are stored instead of passwords. If someone hacks your database, they won't be able to find out your players' passwords.

[Mesut 28]

video guide enjoy!!

 

 

 

 

 

 

 

 

 

Edited April 8, 2024 by Mesut

[Mesut 28]

btw how do i host this on onedrive cloud vector?