Mysidia Adoptables v1.3.1[Security Release]

[Hall of Famer]

It is about time to release the next version Mysidia Adoptables v1.3.1 to public now. The script is rather heavily modified, the magnitude is no smaller than the upgrade from Mys v1.2.2 to Mys v1.2.3, though not as dramatically different as from Mys v1.2.4 to Mys v1.3.0. The new version features several significant enhancement over existing features, security improvement and bug fixes. The major changes are listed as below:


1. The move towards Object-oriented design: Starting from Mys v1.3.1 you will see more and more classes and interfaces from the script files. Example files are class_database, class_item, class_shop, class_pagination and more. The first class file is important, it may affect the coding style of future Mys v1.3.x Mods. Id strong recommend aspiring coders to get used to object-oriented programming and the way to use our database class.

2. Brand new Promocode and Pound System: Some of you may have read the blog I wrote regarding the new promocode and pound system. They sure signify significant improvement over the old script and more importantly, admins will have more control over the features running on their sites. Just as I put it from the blog, you now have more ways to piss off your members, but perhaps in a way you want it to be. Read the blogs if you want to know more details about the new features.

3. Enhancement over items and forum integration: Two new mini-features for items are introduced in Mys v1.3.1. It is not possible to specify chances for items not to take effect, and the maximum quantity of items a user can obtain. Enhancement over forum integration is available too from Mys v1.3.1, as users are automatically logged into their forum account if they log in from the site. It applies to guest-registration too.

4. Security improvement of database: Some of you may have noticed that if you specify database information incorrectly, the PDO class will generate an error message that prints your dbpassword to screen. This is usually not a problem, but can be vital if you have a popular site running already. This security flaw is resolved by the usage of PDO exception. Another possible security flaw is superglobals, I got rid of half of them by using PHP constants.

5. Old glitches fixed in new release: Mys v1.3.0 was quite buggy, this I have to agree. Famous glitches such as file 'uploading path', 'reset password' and 'guest cannot click' are all resolved in this version. Small bugs such as 'friend-option', 'update avatar', 'trade with items' and 'adoptables maximum level' are gone too from Mys v1.3.1. More details can be found in our bug tracker, note the css glitches with pagination and user profile are still unresolved, as I do not know how to fix them myself.


Installation Guide:
1. Use ftp to Upload the entire folder Mysidia Adoptables v1.3.1 to your preferred directory, and change the name to whatever you like.
2. Change the CMD of folder "picuploads" to 777, together with its subfolders, this is required to enable user uploading images.
3. Rename the file config_adopts to config.php, otherwise the script will tell you config.php does not exist.
4. Access the installer script at "http://yoursitename.com/install/index.php", follow the instructions and proceed.
5. Congrats, you've successfully installed Mys v1.3.1. There is no need to manually encrypt your password in Mys v1.3.1, so cheers!

Note: The value pepper code can be generated from a website called: http://strongpasswordgenerator.com/, it can be of any length and may contain symbols. Make sure to delete the file install/index.php after running this script, or your site is potentially at danger if this file is accessed by someone else.

Upgrade Mini-Guide:
An upgrader from mys v1.3.0 is available, but the megaupgrader from Mys v1.2.x will have to wait longer. To upgrade, simply upload all script files to your folder and overwrite the existing ones. Make sure to remove the file config.php from the new script folder(or maybe config_forum.php too if you have an active forum running) before uploading, as otherwise you lose your config settings. Then run the upgrade.php script to complete this task, shouldnt take more than 10 secs. Note you need to manually remove the file poundpost.php from your root directory before proceeding, and the upgrade.php file too after you have completed this process.

Also do not use the upgrader if you have a site with heavily modified script, it only works if you havent touched the core script files such as functions.php and functions_users.php. You will have to upgrade manually if your site is highly customized, just the same old story with Mys v1.1.x and v1.2.x's upgraders.


Forum Integration Guide:

First of all, make sure you have both fresh installation of Mysidia Adoptables and MyBB forum. Open the file /inc/config_forums.php, enter each empty field for the database info of your MyBB forum. Then Change the variable mybbenabled from 0 to 1. The very last step is to disable registration on the forum. It is all said and done, new users will have accounts created from both the adoptables site and the forum from now on. In Mys v1.3.1 they also log into site and forum accounts simultaneously!

Note the forum statistics cannot be automatically updated with registration from adoptables site, so run your maintenance tool regularly. The trick is quite simple, go to forum ACP -> Database Backup -> Recount/Rebuild -> Rebuild Statistics. It is not required though, but your forum statistics can be messed up if you dont do this.


Download Links(both .rar and .zip are provided):

Rapidshare links:

Rar version:
https://rapidshare.com/files/2593229...les_v1.3.1.rar

Zip version:
https://rapidshare.com/files/1889471...les_v1.3.1.zip

Mediafire Links:

Rar version:
http://www.mediafire.com/?b0nnfqcdbll287g

Zip version:
http://www.mediafire.com/?4bte4b419t48w44

I hope you like the direction our dev team is going. It may be hard for some of you, more advanced codes are usually more complicated and tend to be hard to understand. It wont hurt to learn a little bit of coding though, and in fact some of you actually will find the classes/objects quite easy to use. With database class, you do not write long query string and instead call database's select(), update(), insert() or even join() methods to complete tasks. At least for me it is more readable this way.

And thanks for whoever stay with us and look for updates over our softwares. Development actually has a long time to go until we can call it a professional/advanced script, but the day will come.


Hall of Famer
April 8, 2012