Yoh Asakura

Hello community,
I'm here to say that I'm really disappointed with Daifuku.
Between all the users that participated I was the one who won it, but I never got the prize. 
Now here are the facts: Daifuku posted on May 2 the winner (me), but I got sick in May (yes, literally the whole month sick) and I only saw I won around day 24 of May. I then contacted him through Discord to claim the prize, he replied me he was on vacation and would be back around 22 of June. I waited till now and did not get the prize. I understand we all have personal issues, but I at least expected you to be kind and say that you'd give the prize anyways, which you did not.
Now I'm really impressed to see that he actually DELETED the topic "Graphics Giveaway" of which he created. and by the way, on his last post on that topic he said that he would hold ANOTHER "Graphics giveaway" this month. Unbelievable...You do not deserve to be in this position of Graphic Moderator. Hercules deserves better than you, Daifuku.
 
Screenshots:

Hello community,
I'm here to say that I'm really disappointed with Daifuku.
Between all the users that participated I was the one who won it, but I never got the prize. 
Now here are the facts: Daifuku posted on May 2 the winner (me), but I got sick in May (yes, literally the whole month sick) and I only saw I won around day 24 of May. I then contacted him through Discord to claim the prize, he replied me he was on vacation and would be back around 22 of June. I waited till now and did not get the prize. I understand we all have personal issues, but I at least expected you to be kind and say that you'd give the prize anyways, which you did not.
Now I'm really impressed to see that he actually DELETED the topic "Graphics Giveaway" of which he created. and by the way, on his last post on that topic he said that he would hold ANOTHER "Graphics giveaway" this month. Unbelievable...You do not deserve to be in this position of Graphic Moderator. Hercules deserves better than you, Daifuku.
 
Screenshots:

You've helped many of us, including me. I understand we all have personal issues, family matters to solve and etc, but I believe that once you've taken a job, you should finish it. I myself gave you all my server files, including purchased website and patcher, and you simply say you can't do it anymore? I hope everything is alright, and I hope you can find some time so you can finish what you've started.

Kind Regards.

With packet error, look like encryption disabled in client. By default server enable encryption always.
Patch client without changing encryption or disable encryption in server configuration

Hello Hercules Community,
 
Let me explain it first.
It is ExtendedBG, which tends to contain all eAmodBG modes and extra modes(as and when coded).
Some Previews:
http://imgur.com/a/2SSVR
Ohh, and the last thing I forgot to tell,
Its 100% Plugin and Script, no Source Edits ..
 
Special Thanks To:
jaBote co-founded this project(and really thanks to him , that he motivated me at start at provided some functions and idea of how the base should be, and what we should do it to give flavor of Hercules in it).
 
Repository Link: https://github.com/dastgirp/eBG (Please read README.md for installation steps)
 
Leave Comments/Suggestions if you find something.
NOTE:
 There might be some(/many) debug messages left in map-server which will be cleaned up. I will add battle.conf soon (you have to add it yourself for now or edit the plugin) The plugin might be a big mess to read/understand (I did many experiments over the year) There might be some bugs Thanks to @Rebel and @Myriad for testing and providing initial feedback
Contact me on Discord: @Dastgir#1460 if there's some urgent issue or else open the issue in github. keep this topic for support.
 
Want to encourage me??

 

No, I prefer to make a shop so they can choose, is more easy.
  
Change this line
- shop gm_shop_npc -1,607:1,608:2, to this
 
- shop gm_shop_npc -1,607:1,608:2 After the last item ID you can't use ','

You are welcome, I'm glad if I have been of any help
 
And don't forget; never, ever trust user input!

In that case finding the source of the problem might be more difficult.
 
First of all, you should list every single web application using MySQL you use on your server and update them to the latest version. Chances are there is an unfixed SQL injection exploit are relatively high. Looking at the modified tables might or might not help you locate the faulty application depending on how you handle your MySQL databases and users; it's most-likely going to be useless if you have only 1 user and 1 database, for instance.
 
As for FluxCP, I doubt it's the cause of the problem since it uses PDO prepared statements to retrieve data from the MySQL database (the query and the values are handled separately which prevent injections unlike query using strings with concatenated variable values). I am no expert on security though and someone might just prove me wrong on that point. ^^'
 
Anyways after you updated your applications, the last (but not least) thing to check is your custom applications/scripts. Look for SQL query strings with concatenated variables; if the variable is used as is, without any sort of data validation, simply use mysqli::real_escape_string to escape the potential quotes before passing it to your query, or even better, use prepared statements.
 
Injections are possible when you concatenate a variable value coming from user input (may it be a field in a form or a GET variable in an URL) to a SQL query string without any kind of validation/security process.
Your #1 rule when you develop an application should be "Never, ever trust user inputs.".
 
EDIT : By the way when I am talking about applications and scripts I'm not only meaning PHP applications, but actually your RO server scripts as well. RO scripts can also use sql queries; unlike PHP, you can't use prepared statements and have to escape values coming from user input.
 
Basically, search "query_sql" in your custom RO scripts and if you find out that a query uses a variable coming from user input as is, escape the variable with escape_sql() before passing it to query_sql().
I.e : query_sql("select lastlogin from login where userid='"+.@userInput$+"'", .@lastlogin$); => query_sql("select lastlogin from login where userid="+escape_sql(.@userInput$)+"'", .@lastlogin$);
(We all agree using such a query would be retarded anyways, that's for the sake of example ^^)
 
Cheers and good luck!

Like the others said it's most-likely your passwords that aren't strong enough. Another possibility could be a keylogger installed on your computer (or on someone's who have access to your servers); it's always a good good thing to scan for viruses and malwares once in a while.
 
Besides using strong passwords here are a couple of tricks to help prevent your (linux) server from being hacked :
 
1. Never access your server as a root except that one first time when you will create yourself an user with a strong password as well (you can always escalate your privileges with su/sudo if needed afterwards)
1.2 Disable root login from ssh /etc/ssh/ssh_config you will most-likely not need it anymore and it will negate LOTS of ssh bruteforce attempt
 
2. Install fail2ban and configure it for all the online services you are using on your server. fail2ban allows to temporary ban a remote IP address for a given time after a given number of failed login attempts.
 
3. Regarding MySQL as the others said, avoid using php-mysql editors such as PHPMyAdmin and don't directly allow remote connections to your MySQL server. If you really need to access your MySQL server it is safer to forward your remote server to your local machine using ssh.
I.e :  ssh -L 3306:localhost:3306 user@host
 
I have no idea if you can do this on windows though, but MySQL-Workbench allows connections to remote servers via SSH. You should probably look into it.

 
This kind of situation sucks, but what's done is done and you should turn this into an opportunity to learn and never let it happen again. I hope you will be able to fix your servers without too much trouble.
 
Cheers!

use passwords like this:
 
U^4spfQEKcJ^vJjhC%!gBR3s
 
or this
 
*~Uw_D!d.|mx.c4K6SD*JvXG
 

Majority of hacks nowadays are caused by lack of strong passwords. A simple " dsadfsafeD2005 " password can be cracked by password generator softwares 'dem hackers use. Strong Passwords = symbols, letters, numbers and roughly longer than 10 characters long.

lol that is really easy and you should just read what it said
 
somewhere in config (most likely config/servers.php), it asked for the timezone you wanted to use, you chose "EDT/-4.0/DST" and that is not an acceptable value, the correct ones are here, like the comment said:
 
 
// Example: '+0:00' is UTC.// The possible values of 'Timezone' is as documented from the MySQL website:// "The value can be given as a string indicating an offset from UTC, such as '+10:00' or '-6:00'."// "The value can be given as a named time zone, such as 'Europe/Helsinki', 'US/Eastern', or 'MET'." (see below continuation!)// **"Named time zones can be used only if the time zone information tables in the mysql database have been created and populated."   

lol dude just read and do what the error message tell you to do:
 
The log storage directory '/var/www/html/cp/data/logs' is not writable. Remedy with `chmod 0600 /var/www/html/cp/data/logs
 
(btw I think it needs 777 and not 600 but whatever)

Emistry's Multi Currency Shop in rAthena works fine with my servers. That's what I use for my VoteShop. Just set the currency to the variable you want and you're good to go.

that is almost exactly of what the script does:
 
prontera,153,152,1 trader TestCustom2 952,{ OnInit: tradertype(NST_CUSTOM); sellitem Red_Potion; end; /* allows currency to be Red_Potion */OnCountFunds: setcurrency(countitem(Red_Potion)); end;/* receives @price (total cost) */OnPayFunds: if( countitem(Red_Potion) < @price ) end; delitem Red_Potion,@price; purchaseok(); end;}

Introducing Hercules' Map Zone Database
Hello~! - What?!
1st, it is a merge from item_noequip.txt and skill_nocast_db.txt functionality. 2nd, it is a major improvement on what these features did in both performance and usability. map_zone_db.txt format sample
{     name: "My Zone"     inherit: ( "My Other Zone" )     disabled_skills: {         AL_HEAL: "PLAYER | MONSTER | ELEMENTAL"         AL_TELEPORT: "MONSTER"         MG_FIREBOLT: "NONE"         //MG_NAPALMBEAT: "PLAYER"         //ID11: "PLAYER"     }     disabled_items: {         Assumptio_5_Scroll: false         //Apple: true         //ID501: true     }     mapflags: (         "adjust_skill_damage    MG_FIREBOLT    250",         "adjust_unit_duration    PR_SANCTUARY    50"     )     /* "command:min-group-lv-to-override" e.g. "heal: 70" */     disabled_commands: {         //Example Below makes @heal be used in maps within this zone only by those group lv 70 and above         //heal: 70     }     skill_damage_cap: {         //Exemple Below caps firebolt damage in maps within this zone to a maximum 50 damage,         // (depends on HMAP_ZONE_DAMAGE_CAP_TYPE in src/config/core.h)         // when cast vs players and monsters.         //MG_COLDBOLT: (50,"PLAYER | MONSTER")     } } Notes on the format
In disabled_skills the var following the name (: "PLAYER | MONSTER | HOMUN | MERCENARY | ELEMENTAL | PET | CLONE | MOB_BOSS") is what allows a zone to know what unit types should have this skill disabled. In the sample above, for example, in My Zone, player, monster and elemental unit types are unable to cast heal, while only monsters are unable to cast teleport. this variable may also be used to ignore skills from inheritance, for example if My Other Zone disabled a number of skills, including MG_FIREBOLT, in My Zone all of them will be disabled as well, except for MG_FIREBOLT since it is set as NONE. In disabled_items the var following the name (: true or : false) is what allows a zone to override what it inherited, for example if My Other Zone disables a number of items, including Assumptio_5_Scroll, in My Zone all of them will be disabled as well, except Assumptio_5_Scroll since it is as false. A zone may enforce an unlimited number of mapflags on all its maps, by using this sample all maps under My Zone will have Fire Bolt damage increased by 2.5x and Sanctuary will have its duration halved. A unlimited number of maps may be linked to a specific zone through a mapflag '<map name><tab>mapflag<tab>zone<tab><zone name>' Changes The mf_restrict (restrict) was dropped. item_noequip.txt and skill_nocast_db.txt were dropped, replaced by map_zone_db.txt. setmapflag script command was modified to support the new zones. @mapinfo was modified to support the new zones, also modified the formatting and made it include the amount of vendings. Improvements As opposed to item_noequip.txt and skill_nocast_db.txt, map_zone_db.txt supports an unlimited number of zones. map_zone_db.txt implementation surpasses the ones from item_noequip.txt and skill_nocast_db.txt, making item equipping (pc_useitem/status_calc_pc) and skill using (previously skillnotok, now status_check_skilluse) processing much faster and efficient. @mapinfo performance was improved (was doing chat room dbmap lookups without even checking if player was on the map in question) Special Thanks to Muad_Dib <3. to lighta for discussing the feature with me and helping design the unit-based restrictions on skills to Bahmut and Emistry for ideas on how to format the file. to kyeme for feature ideas. Links~! Commit Commit 2 (update) Map Zone Database File

I guess you added it inside the npc script, it need to be added outside:
 
 
function etc etc {
function etc
}
 
npc script {
etc etc
etc
}

http://upaste.me/r/2bd19c

Official Item Group/Package/Chain
 
Overview
Implementation of the official 'Item Packages', 'Item Group' redesign, 'Item Chain' implementation. item_group.conf : Overview / Sample
The file was redesigned to make it attend the official equivalent's and to be more flexible, there are no more limitations on the number of groups or on how many items a group may contain, these limitations were lifted. Old_Card_Album: ( // <= <Container_Item_Name>     ("Poring_Card",8), // <= entries can be either ( "<Item_Name>", <Repeat_Count> )     "Sting_Card" // <= or "<Item_Name>" (no repeat) ) item_packages.conf : Overview / Sample
The file was created to meet the requirements of the official 'Package Item' feature, there are no limitations on how many packages you may add either. Gift_Bundle: { // <= <Container_Item_Name>     White_Slim_Potion: {// <= <Entry_Item_Name>         Random: false //May be omit when not false, signs whether a item is random or should be given whenever the packageis consumed.         Count: 30 //May be omit when not higher than 1, stands for how many <White_Slim_Potion>     }     Muffler_: {         Expire: 2 //May be omit when none, signs how many hours this item will last (makes a rental item)         Announce: True //May be omit when false, signs whether to relay a special item obtain announce when this item comes out of the package.         Rate: 50 //May be omit when 'Random' is false, from 1 to 10000 (0.01% - 100%)         Named: True //May be omit when false, signs whether the item should have the owner's name in it.     } } item_chain.conf : Overview
Officially this thing is called groups too but I found it'd be confuse to have 2 group files with entirely different functionality, named chains because the items in it are chained to each other, this file fixes quite a few stuff, for example before this patch having BS_FINDINGORE drop something was almost twice as rare than on official servers, also fixes Jewel_Sword, Gaia_Sword, Blazzer_Card, Tengu_Card and Bogy_Horn. New
'packageitem' script command, it has only 1 param which is optional, for the package item id, when not provided it'll try to use the item id from the item it is being used from (if called from an item script), it runs a item package and grants the items accordingly to the attached player. Changes
'#define MAX_RANDITEM' and '#define MAX_ITEMGROUP' were dropped, these limitations no longer exist and the server may support an unlimited number of item groups. 'item_findingore.txt' was dropped, its contents moved into 'item_chain.conf' 'item_bluebox.txt', 'item_cardalbum.txt', 'item_giftbox.txt', 'item_misc.txt', 'item_violetbox.txt' and 'item_group_db.txt' were dropped, its contents moved were updated and moved into 'item_group.conf' 'bonus2 bAddItemHealRate' changed; as group ids no longer exist. 'bAddMonsterDropItemGroup' was renamed to 'bAddMonsterDropChainItem' and changed from bonus 2/3 to bonus (0)/2 as the rate param was dropped because item chains have their own individual rates. Item names are now automatically made constants, so they may be used in any scripts throughout the server e.g. 'getitem Apple,1;', this works for all items except those having ' in their names (e.g. doesn't work for 'Monster's_Feed'). 'getrandgroupitem' and 'grouprandomitem' were modified since group ids no longer exist, item ids should be used instead (or constants as the item above mentions), e.g. 'getrandgroupitem Old_Blue_Box,1;' or 'getrandgroupitem 603,1;' Dropped conf/battle/drops.conf 'finding_ore_rate' for it has no place in the official formula (if you'd like to modify finding ore rates, edit them via item_chain.conf) Special Thanks
Beret and hemagx for bringing this change up to discussion, and the data they contributed into it Yommy and Muad_Dib for all the new item data implemented in this commit (a hell of stuff! THANK YOU BOTH <3) Streusel for all the over 100 new items he converted Gepard for the group item repeat info Masao for his debugging of the monster spawn issue Mysterious for updating the documentation Link~u!
Commit

Have you updated your lua/lub files? https://rathena.org/wiki/Custom_Items#Weapon_Sprite_Solution_.28For_New_Clients.29

The translation is correct.
¾ÆÀÌÅÛ = 아이템 = drag sprites, 'icons' is a bit misleading. It would be more appropriate to call the 'icon' folder datatexture유저인터페이스item instead.
Àΰ£Á· = 인간족 = "Player" folder, where the weapons indeed go.
 
Maybe this will help : 

 
Then again, making custom weapons is a different topic altogether ;].

you put the "inventory" spr/act files in the "equipped" folder

- script MapAnnounce -1,{OnPCLoadMapEvent: if( strcharinfo(PC_MAP) != "pvp_y_2-2" ) end; set .@countUsers, getmapusers(strcharinfo(PC_MAP)); if( .@countUsers % .rangePLayersAnnounce == 0 ) { announce "There are " + getmapusers(strcharinfo(PC_MAP)) + " players on map " + strcharinfo(PC_MAP) + ".",bc_blue|bc_all; } else if (.@countUsers == .fullPlayersAnnounce) { announce "The map " + strcharinfo(PC_MAP) + " is full!",bc_blue|bc_all; } end;OnInit: set .rangePlayersAnnounce, 3; set .fullPlayersAnnounce, 10; end;}pvp_y_2-2 mapflag loadevent The announce missed the parameters and the tab weren't parsed correctly. Nevermind, there shouldn't be errors now

It depends on
 
.StatusN = 300; //Status Point to Give at Every Normal Rebirth. .StatusM = (.StatusN * .MasterRebirth) + 200; //Status Point to Give at Every Master Rebirth. (Don't Change initial part) If that's unaltered.
and if you did 5 normal and 1 master, then your status point =  ( ( ( 300*5 )+200 )*1 ) + ( 300 * 5) = 3200 Status Points
 
 
Script Updated to v1.3
now can rebirth any job by setting
 
setarray .add_jobs[0],Job_Gunslinger, //Additional Jobs, who can rebirth  Job_Soul_Linker,  Job_Star_Gladiator,  Job_Taekwon; @@Skyline xD

try this if you want to..
- script checkitem -1,{ end;OnPCLoadMapEvent: addtimer .timetocheck*1000,strnpcinfo(3)+"::OnCheckItem"; end;OnCheckItem: for (.@i = 0; .@i < getarraysize(.item_list); .@i++) { if (countitem(.item_list[.@i])) { mes "[^FF0000 Guard ^000000]"; mes "Sorry "+getitemname(.item_list[.@i])+" is not allowed in here!,"; close2; warp "prontera",150,150; end; } } addtimer .timetocheck*1000,strnpcinfo(3)+"::OnCheckItem"; end;OnInit: setarray .item_list, 607, 608; // add item you want to check here .timetocheck = 1; //Seconds after which idle is checked. end;}// Mapflagpvp_n_6-5 mapflag loadevent