有興趣的玩家可PM我.. 並留下你的WOG網址及(ICQ或MSN),我會在到訪你的WOG網站後與你聯絡.
暫沒有圖片,如想知詳情可到我的WOG參觀(需要註冊的)
(事先聲明:鑑於我前次的作品(ACP Mod)慘被侵權,故此我保留發放檔案的決定權)
Sample : http://forum.pcgamebase.com/wog/
- 代碼: 選擇全部
===============================================
插件名稱﹕wogProArcade v1.0 (COOKIE Ver.)
===============================================
插件版本﹕V1.0
適用版本﹕WOG﹗ 2.x
插件功能﹕給WOG增加一系列flash小游戲﹐在游戲結束後﹐其游戲得分可按設置的比率轉換成現金﹐當然﹐進入游樂場時﹐要收取一定的門票（可設置）。
插件特色﹕獨一無二的可與wog相結合的flash游戲集﹐大大增強你的WOG及論壇的可玩度和吸引力﹐更全面支援vbProArcade的遊戲。
插件作者﹕K.P.Wan,Terry. (別名: CHOBITS) http://www.hk-system.net/
最後更新﹕2004-08-02 at 06:45 PM
技術支持﹕http://bbs.2233.idv.tw/viewtopic.php?t=13524
修改文件﹕wog_top.html
新增文件﹕proarcade.php﹑proimage.php﹑global.bak.php﹑games/*.swf
安裝難易﹕易
===============================================
/*==========================================================
MOD: wogProArcade v1.0 (COOKIE ver.)
File: readme.txt
wogProArcade v1.0 Beta beta For WOG ONLINE FF BATTLE 2.x
Build: v1b0.040730
Copyright (C) K.P.Wan,Terry<admin@hk-system.net>
Modify : 2004/08/02
URL : http://www.hk-system.net
Copyright 2001 - 2004 HK-System.Net All Right Reserved.
============================================================ */
安裝﹕
解開壓縮包﹐按解壓後的路徑上傳到WOG根目錄
解壓並上傳後﹐請在PHPMyAdmin執行gamedata.sql
1﹑修改wog_top.html 找到﹕
賽鳥場</a>】
在後面添加﹕
【<a href="proarcade.php" target="wog_view">遊樂場</a>】
2﹑將global.php拷貝多一份,並將考貝的備份更名成global.bak.php﹕
3﹑修改 global.bak.php 找到﹕
post_check($_POST);
在前面添加﹕
//
完成
3﹑特別注意﹕proarcade.php和proimage.php內
require($root_path.'vbb_support/global.bak.php');
require($root_path.'vbb_support/function.php');
require("./wog_act_config.php");
的路徑必須正確!
proarade.php內的$wPAdebug在非Debug時請設定為OFF. (基於系統安全)
Others Information for Game Development:
/*============================================================
Action Script for Game Development
============================================================ */
// set up vars to return
vpaver = "100B2";
scorevariable = score;
action = "gameover";
game = gamename;
score_loc = location + "/proarcade.php";
// this needs to match the Admin CP value
// and should be between 0 and 31
hashoffset = 5;
// do security shuffle to return newhash
subhash1 = gamehash.substr(0,hashoffset);
subhash2 = gamehash.substr(hashoffset);
newhash = subhash2.concat(subhash1);
// redirect back to wogProArcade
getURL (score_loc, "_self", "POST");
-----
There are a couple of things to pay attention to here. First, "scorevariable" MUST match whatever you set the score variable to be in the WOG Database. In this case, "scorevariable" would correspond to "$scorevariable" in the CP. Second, "hashoffset" MUST match the hash offset defined for the game in the WOG Database. This value needs to be between 0 and 31, since the MD5 hash is a 32-character string. If these values do not match, you game will always return a Security Violation after exiting.
/*============================================================
When you add a game to the arcade, you must give the arcade the HTML code associated with the Flash file, which should look something like this (this is the default code for Tetris):
OBJECT CODE
============================================================ */
<object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,0,0" width="350" height="250">
<param name="movie" value="$vpa_gameurl?location=$vpa_url&gamename=$game&gamehash=$gamehash&s=$_SESSION[WOG_ID]&username=$username&highscore=$highscore&sid=$session_id&timevar=$timevar">
<param name=loop value=false>
<param name=menu value=false>
<PARAM NAME=quality VALUE=high>
<PARAM NAME=bgcolor VALUE=#000000>
<embed src="$vpa_gameurl" pluginspage="http://www.macromedia.com/go/getflashplayer" type="application/x-shockwave-flash" width="350" height="250"></embed>
</object>
-----
Note the variables that can be used in this process:
$vpa_gameurl - The Path to the Arcade Games on your Server
$vpa_bburl - The Path to your Forum on your Server
$game - Game's Text Identifier
$gamehash - Game Security Hash (will not return scores correctly without this)
$_SESSION[WOG_ID] - wog Session Data (should pass this for non-cookied users)
$username - User who is Playing
$highscore - Current High Score for this Game
$session_id - Game Security Hash (will not run the game correctly without this)
$timevar - timestamp for Secrity Hash (will not run the game correctly without this)
Not all games will support all of these, but if you are creating (or modifying) a game to work with wogProArcade, you might make use of some of these variables to "spice it up" a bit.
The rest of the code should remain the same from game to game and does not need to be specially modified. If you are wondering about the security features, see the section on security further down in this documentation.
Also note that before modifying any games you find, please make sure that you have the author's permission, *especially* if you intend to redistribute the file after it has been modified.
Arcade Tables
-------------
There are five tables that make up wogProArcade:
arcadeconfig - Stores the Arcade Configuration
arcadegames - Stores the Arcade Games' Configuration
arcadescoregroups - Defines Groups of Scores (not fully implemented)
arcadescores - Stores the Top Scores for each Game
arcadetopscores - Stores the Scores for each Game
To see the individual layouts of each table, you can execute a "desc tablename;" query from the MySQL command line.
Score Table Structure and Security
----------------------------------
First of all, the arcadescores table (which stores the regular scores themselves) now looks like this:
int(10) unsigned scoreid unique score identifier
int(10) unsigned scoregroup group the score belongs to
varchar(50) game game's textual identifier
int(11) begintime timestamp for game start
int(11) endtime timestamp for game end
varchar(50) gamehash md5 encrypted identifier
tinyint(1) valid see if score is valid (0 invalid, 1 valid)
int(10) unsigned userid userid of player
varchar(50) username username of player
int(11) score user's score
varchar(70) comment user's comment
When a user chooses to play a game, the database creates an invalid score entry containing that user's name and ID, the current UNIX timestamp, and an MD5 hash of some encrypted value. The hash, along with any other interesting information, is passed into the Flash game.
When a Flash game exits, it redirects the user to the "Game Over" screen, and passes along the hash with the other data. The Arcade then queries the database, looking for the most recent entry for that particular user, checking to see if the game matches, the hash matches, and that the time is greater than the recorded time. If everything checks out, the score is recorded as a valid score, and the user is prompted to enter a comment.
When the user clicks "Submit" on the comment screen, a new, random MD5 hash is generated and stored alongside the score in the database, which is then passed along with the form data, and re-checked against the database. This will prevent users from "brute-forcing" the Arcade to record a new comment for a given score.
On top of the MD5 security, the server is recording the entry and exit timestamps of each game, which cannot be altered by user input at all. An astute administrator should be able to determine whether or not a game was completed in a reasonable amount of time or not, thus giving him or her yet another method of weeding out fake scores, should they arise.
Another new feature of the score table is "Score Grouping." Although this is not yet implemented, it will allow the Administrator to define sets of scores for a given time period. This could be used for daily, weekly, or monthly scoreboards, for example, or perhaps for a tournament or some other form of grouping.
Obviously, this system is not foolproof, since a cheater could (for example) still wait the requisite amount of time for a game and use a hex-editor to change memory locations. Still, this is a good start, and should prevent all of the "address bar cheating" that we saw with Beta 1.
wogProArcade (Cookie Version)Bug Fix
- 代碼: 選擇全部
//proarcade.php
//======== FIND ==============
$session_id=md5(session_id().$timevar);
//======= REPLACE TO =========
$session_id=md5($timevar);
//======== FIND ==============
if ($_POST["sid"] != md5(session_id().$_POST["timevar"])){
//======= REPLACE TO =========
if ($_POST["sid"] != md5($_POST["timevar"])){
//======= SAVE & EXIT =========
