Seamless

A modern game panel rebuilt from scratch for Lineage 2 private servers What is L2jWeb V3? L2jWeb V3 is the new version of the panel, fully refactored from scratch. This is not a small update on top of the old V2 code. The whole structure has been redesigned with cleaner logic, better separation between the web panel and the game database, improved security, and a much better way to support different L2J sources. The goal is simple. Server owners should be able to manage their project, users, donations, shops, game accounts, characters, and multiple servers from one panel without having to fight with hardcoded database logic every time they use a different source. Refactored From Scratch The new implementation was built again from the ground up. The old approach worked, but over time it became harder to maintain because every L2J source has its own database structure, table names, columns, and custom changes. V3 solves this in a cleaner way. Instead of mixing source specific queries all over the panel, the system now uses a proper mapping layer for the game database. Correct L2J Source Database Mapping One of the biggest improvements in L2jWeb V3 is the new database mapping system for different L2J sources. Every important game object is bound to an interface contract. Accounts, characters, items, services, rewards, and other source related actions are not hardcoded directly into the panel anymore. The panel works with contracts, and each L2J source has its own implementation behind those contracts. In simple words, the panel knows what it wants to do, and the selected source knows how to do it in its own database. This makes the project much easier to maintain, easier to extend, and much safer when adding support for more L2J sources in the future. Multi Server Support L2jWeb V3 supports multiple game servers from the same installation. You can add and manage different servers from the admin panel. Each server can have its own database connection, source type, settings, shop products, and services. This is useful if you run more than one realm, different chronicles, seasonal servers, test servers, or multiple projects from the same community. x402 Wallet Crypto Payments L2jWeb V3 also adds support for the x402 protocol. This is a very important feature for modern payments because it allows wallet to wallet payments without a traditional middleman holding the money. With normal payment gateways, the payment usually goes through a company that controls the flow, keeps custody for part of the process, applies rules, and may block or delay things. With x402, the user pays directly from their wallet and the server owner receives the payment directly to their wallet. The facilitator helps the application verify the payment. It checks the payment proof and confirms that the request has been paid correctly, so the panel can safely continue with the donation or balance update. The important part is that the facilitator is not the same as a classic payment processor. It helps with verification and coordination, but the funds move wallet to wallet. For server owners, this gives a more direct payment option and reduces dependency on traditional third party platforms. In order to learn more for x402 protocol click here Donation System L2jWeb V3 includes a complete donation system. Supported payment options can include: Stripe PayPal x402 wallet to wallet crypto payments Donations can be stored in the user's master account balance and then used inside the panel for shop purchases, services, or other features depending on your setup. Master Account System Players use one master account to manage their game accounts and characters. This makes things easier for the player because they do not need to remember every detail separately. From the user panel, they can create game accounts, manage existing accounts, recover details, and access available services. Game Account Control Players can manage their game accounts directly from the panel. Available features can include: Create game accounts Manage existing game accounts Reset or recover credentials View linked characters Use account related services Receive game account details by email if enabled Character Menu And Services The character menu gives players quick access to useful character actions from the web panel. For example, if a character gets stuck, the player can use the unstuck option and send the character back to town without waiting for staff support. More services can be configured depending on the server setup. Shop And Services The shop is fully manageable from the admin panel. You can add products, edit prices, enable or disable products, and choose which server each product is available for. This makes it easier to monetize your server while keeping control over what each server can sell. For example, one server can have different products or prices than another server. Fully Customizable Theme The panel is fully customizable through theme settings. You can change logos, icons, and all main colors directly from the panel, so the website can match your server's branding without editing the code manually. Admin Panel L2jWeb V3 includes a powerful admin panel for managing your project. Admin features include: Server management User management Donation logs Shop management Panel settings Theme settings for logos, icons, and colors Social login settings Security options Game source configuration Most important settings are configurable directly from the panel, so you do not need to edit files manually for every small change. Security Features Security was also improved in the new implementation. Available security features include: Two factor authentication Email verification Cloudflare Turnstile protection against bots Rate limiting per guest IP or authenticated user CSRF protection XSS protection Security headers HTTPS only protection Password confirmation for sensitive actions Social login support Social Login The panel can support social login providers such as Google and Discord. This gives players a faster way to register and log in, while still keeping the account system controlled from the panel. Other Features Database cache system Server status Multi source support Optional email verification Optional account details email after registration Cloudflare Turnstile bot protection Modern user dashboard Modern admin dashboard Clean Laravel based implementation Demo demo.l2jweb.com Some features may be disabled in the demo version or may not work exactly like a live installation. Contact Discord: Contact me Pricing Price is 150 euro flat, the same as Version 2. Existing customers get a 50 euro discount. Custom Work If you need custom features, source adaptations, special services, design changes, or extra integrations, you can contact me and we can discuss your request. Extra custom work is not included by default and must be paid separately. Test And Payment Files are not delivered before payment. If you want to test the panel first, a demo link can be provided.

I would agree regarding the closed source especially if the client is distributed for free in compiled form. On other hand, in order to do anything remotely different to apply changes on existing clients is huge caveat. You need to deal with legacy software or community based apps and most of the time to hit a wall. Ai slop or not someone took the initiative to develop something and provide it for free.

Good projects are developed quietly and launched only when they are ready to maintain a consistent online presence and build a community. The formula is simple, yet people keep making the same mistakes. Start with an alpha phase and keep access limited. Since the author claims to already have an inner circle, use that group for early testing. Then open a closed beta through invitation keys or a similar system. Later, announce an open beta. During these early stages, do not accept donations, partnerships, or other forms of support. Focus entirely on improving the project. Once it is stable, announce it and continue maintaining it regardless of the maximum number of users on

I’m waiting to see a new post offering the source code and a new client engine for 10K.

If you find a gen z who knows what l2 is, I will give you 50 euro. We should let this game rest. Trust the process: spin up 10 agents and build it in a few weeks, and sell it for a million dollars with anti cheat software included. E-Global made it possible, and now I can point and click as fast as lighting. im pretty sure ive seen many messiahs bring "the best project of our lives" only for it to rise and fall. This conversation has been recycled over and over again. But who knows? Maybe one day, after 30 years, we lll finally get a decent project that doesnt bring back the same old gameplay ideas. Then some russians, argentinians, and brazilians will enter the game and cry about how different the gameplay is from the original Lineage 2 game, and then "bb, dead trash server." After that, the admin will recycle the files or sell them for 5k, make a new project based on Interlude, and everyone will be happy again. No more admins please thanks

@l2naylondev Requiring a player to log in just for the sake of logging seems exploitable. Someone could log in only to claim the reward and immediately leave, or repeatedly change their ip. So i guess are there are additional protections in place ? such as locking the reward by account, character , and ip. It would also be useful to add a playtime requirement. For example, after logging in, the player would need to remain active for at least x playtime before getting the reward or other parameters configurable by the xml. I suggest improving the system before selling it.

It requires a lot of research and money to create something that is actually worth having on someones server. But again, even if something worth trying appears, I dont even trust vanguard at this point, and its even worse if theres some kernel driver signed by a single person without a real company behind it to take the hit if something goes wrong. Thats a huge security risk. Most people are naive and untrained for thinking its okay to elevate permissions for an executable created by someone in their moms basement. The same goes for people who run compiled shared / paid sources and assume its fine, with nothing malicious running inside them. A user with 13 posts suddenly appears. This is a tech forum, and developers are not here to flex. We are simply discussing the potential risks and reliabilty of the product, since that is the whole purpose of a discussion forum. Otherwise, it becomes no different from marketplaces. In addition, it is reasonable to question someones capabilities based on their available public data. How do you go from selling web apps to working with such low level concepts that require a lot of specialized knowledge? Think again then before you buy from him with a blind eye. The first statement contradicts the other one. You say you wont allow anyone access, but youre willing to explicitly run an anti cheat on your computer created by this guy. What exactly is your point?

I agree. You mention a lot about system calls. At which level? If your driver component runs in user mode, someone can pretty easily send whatever data he likes to the backend. Also, even if you load sys kernel driver using windows service manager, the driver still needs to be signed and comply with secure boot policy, vbs / hvci / memory integrity restrictions if those protections are enabled.

Em dashes everywhere.

So you developed a rate limiter with extra steps on the application layer ? Do you know that http is on top of tcp and someone can exhaust your resources before even reach your app ? Thus whatever limit/rule you set is a bit obsolete and creates complexity for your app. Also the order is cloudflare/ os firewall / nginx / php

@Elfo Thanks for your reply. At this point, I’m more interested in your ai workflow rather than the actual implementation. Even if you don’t open source it, it would still be really valuable for research if you could share the technologies you used in each step. Great job Holy cow thats about 15k Webgl ?

First of all, its great to finally have something meaningful to discuss on this forum and good job pushing this community forward, even if its mostly dead. I always wondered why, in the last 15 years, no one has properly documented any of the source code (acis mobius) or at least exposed common functionality through something like a rest api, which is straightforward enough for most people to understand and use. I have some technical questions since im really interested Regarding real time features like maps and enchanting are you using technologies like grpc? And what happens when both a logged in player and panel try to enchant the same item at the same time? Do we run into a race condition how do you handle that ? Regarding fake player system external models calls typically take 1-2 seconds to respond, while an local models might take around 200-300ms. During that time a lot can happen in game. So when the plan becomes stale you override it and wait for the new one meaning the node handles everything in real time and the LLM simply sets the goal asynchronously. Is that the correct understanding ? Regarding the security aspect a lot can go wrong when exposing crucial server logic to the open web (experimental is good). My real concern is the mcp in the panel where a lot can go wrong with bad user input. Wasn't the game client always the limiting factor for l2j?

No matter what you are going to use, paid or non-paid or whatever, everything requires personal time investment and a lot of trial and error in many sectors of IT. I have used and seen (clients of mine) L2J Sunrise, Mobius, ACIS, and Lucera. Not even one was close enough to providing a decent outcome without the need for some heavy dev intervention. Even if you provide a decent pack, you will have to think about cheaters, marketing, monitoring, network protection, and the list goes on depending on the problem. Thus, I have no clue why people here debate so much about datapacks because I remember the days when we were playing on private servers with 80% less functionality than the current Lineage 2 emulator state, and it was enough to have fun. Now the leftovers are such a toxic community that I have no idea what drives people to open projects except money. My 2 cents choose whatever will ease your life in terms of development and your life/work/budget balance and dont spent months trying to figure out what datapack is superior over the other. You have more serious things to consider.

You should buy it then I’ll make a discount

This topic is genuinely amazing. So do we end up on l2jorion ?

correct. for example with semantic kernel sdk that exists also for c# and java you can do all sorts of things. even orchestrate an llm to call classes and manipulate objects or even execute database queries. you can literally simulate a real player process on a loop. and yes its costly if you use services like azure. but you can find cheaper alternatives or even free if you brave enough and have time

I suggest logging real player data such as positions, movement, quests, skills used in real time, and general actions and save them in whatever format you like. You need to organize and verify the data. If your data are not enough you can create synthetic data based on your existins real data. later you have 2 options You can fine tune a smaller model (for example, from hugging face). This requires time, money(compute power), and plenty of trial and error, but the benefit is that you can run it locally without relying on external services. Use existing LLMs and instead of training you can store your data in a vector database and let the LLM query it( im not sure if RAG is the right term here). This approach is faster to set up but depends on the model and the output you want to achieve(you will need some research there). Regardless of which approach you take you should expose only safe actions through a service or API. This can be done with MCP(model context protocol) or a custom api ensuring the model (local or external) can only trigger controlled api calls such as movePlayer, castSkill, etc etc, which are already implemented in most sources, but you will need to implement them for your models output and behavior. Doable? Yes by commiting a tone of hours and i dont think java code is the problem here. Is it worth it? If you’re doing it to learn then go for it. But if your goal is to create “real fake player” experience on your server or to sell it later its not worth it. Spend your time elsewhere yes they can

One thing i want to add is disabling root login, creating a new user with sudo privileges, setting up SSH key authentication and completely disabling password logins and also avoid exposure on port 80 completely. it's much better to manage them directly from your local machine using IP whitelisting on database user or firewall-iptables. This way, only trusted IPs have access. Even better ssh tunnel. Good job though.

Dude, seriously , how are you okay with publishing something like this as a public repo? I spent just 30 minutes reviewing your source code and already managed to bypass your API wall on the admin routes. You really need to rethink your server to client logic. What's the point of saving data both to your API and to the user's database? You first fetch the servers from your API and then save them to the database. What’s stopping someone from simply fetching their server data directly from the database and bypassing all the API logic? The client you provide as a public repo should only act as a wrapper around your service API and that's it. The API should handle all the logic, including connecting to the corresponding servers based on authentication key requests and so on. I don't even want to get started on the fact that your codebase is a complete mess...... unused variables everywhere, empty classes, and zero input validation. Anyone can pass whatever payload they want without restrictions. You seriously need to fix these issues before some poor guy who has no idea ends up buying your service. And don’t even start with "I'm still waiting for my server to get hacked" because no one is going to waste time trying to hack something that's not even worth the effort. just by checking this im 90% confident someone can find something. Also, you claim that 250 domains are already using your service? I seriously doubt that. also LOL

Great job! Its exciting to see control panels evolving with better technologies and modern libraries. Id love to see this implemented for other L2J sources beyond acis.

Every once in a while a "messiah" appears to throw garbage on a post in a dead forum, trying to revive something that is already long gone. The problem with this game isn’t corruption, donations, or even bad files. There are good projects with the same concept worth mentioning, but the reality lineage is old. Deal with it and move on. If you have the money, the infrastructure, and the developers, start building something new. In 2025, there are plenty of options, from Unity and Unreal to Godot. If you have ideas, put them into action and create something similar but fresh. After all, recycling trash still leaves you with trash

Happy sales. good to see something for wordpress.

I understand that this forum exists because a certain group of people likely know each other and share files as if it’s Christmas. However, let me clarify my point, as it seems many of you might not fully understand proper English. At no point did I call anyone sketchy rather, I referred to the post itself, as it does not clearly state the purpose of sharing something of such value. I have no idea who Shadawnetwork is or what he does, and frankly, I don’t care. I am not trying to create drama. I simply read a post about some pack with legitimate features and tried to understand the reasoning behind sharing it compiled. The author of the post responded: "Couldn't care less about money, especially within the L2 scene. Hope this clears things up for you & anyone else with the same thought pattern." So, yes, he made it clear his intentions are purely out of goodwill, and he’s the nicest guy in the room, doing this all for fun with no interest in profit. That’s fine. However, most people here don’t truly know what they are downloading, nor are they trained to recognize potential risks. A compiled JAR file can contain anything we’ve seen this happen in this forum many times. So, I simply expressed my opinion, as I assume this forum is open for discussion. After all, even open source projects have been found to contain exploits. The result to get attacked like we are in pre school. Since I did some research on who this guy is wasn’t he the one who shared ACIS 409 before anyone else? Yes, definitely very trustworthy. Even his writing style speaks volumes about his character. But honestly? I couldn’t care less. Don’t worry, boys Lineage 2 has been saved today.

Free share my gay ass

PS: You are still gay and still have gay sex with men. did papa rape you when you were younger thus the homophobic comments ? fragile masculinity. go get a gf or smth and let me fuck what ever i like. that exactly what i pointed out regarding this post. I didn't find anywhere that he is selling stuff. thats simply all but people get offended easily these days ffs