Znote / ZnoteAAC

Developement repository for the Znote AAC project. A website portal to represent and manage your Open Tibia server.
MIT License
145 stars 127 forks source link

Manually updating guild inputs #457

Closed 3YH closed 3 years ago

3YH commented 3 years ago

Since the hidden inputs for updating ranks, disband etc. can be changed manually anyone can enter another guild ID and submit the form as that guild. See this line for example: https://github.com/Znote/ZnoteAAC/blob/fa5fac75a78437605a71c34851c7b8fbc1a4a2ae/guilds.php#L799 The id of other guilds are exposed in similar fashion inside the war invite area. The war max/min kill limit can also be edited in input. Some extra checks are welcome, nothing for rank length etc. It is also possible to create a guild with a space as name including ranks with a long string of spaces for instance, looks crazy ingame.