Jump to content

Recommended Posts

Posted

What is this code? It's a simple class which the gms are able to open votes with own question.

 

Tested: YES, coded in notepad++  ;)

 

- Commands:

 

//setwords option1 option2 option3

exemple: //setwords 1v1 2v2 3v3

when the options are ready, write //startvotes for html ...

also //showvotes will show the votes

//clear - the command will help you to clear the options and votes


vote.htm - Index: gameserver\data\html\custom

<html><body><title>Vote for Event</title>
<br><br><br>
<table width=270>
<tr>
<td valign=top width=75>%first%</td>
<td valign=top width=35>%voteCount1%</td>
<td valign=top width=75><button value="" action="bypass -h custom_vote_1" width=16 height=16 back="L2UI.CheckBox_checked" fore="L2UI.CheckBox"></td>
</tr>	
<tr>
<td valign=top width=75>%second%</td>
<td valign=top width=35>%voteCount2%</td>
<td valign=top width=75><button value="" action="bypass -h custom_vote_2" width=16 height=16 back="L2UI.CheckBox_checked" fore="L2UI.CheckBox"></td>
</tr>
<tr>
<td valign=top width=75>%third%</td>
<td valign=top width=35>%voteCount3%</td>
<td valign=top width=75><button value="" action="bypass -h custom_vote_3" width=16 height=16 back="L2UI.CheckBox_checked" fore="L2UI.CheckBox"></td>
</tr>
</table>
</body></html>

 

 

AdminCustom.java - Index: net.sf.l2j.gameserver.handler.admincommandhandlers

/* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2, or (at your option)
* any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
* 02111-1307, USA.
*
* http://www.gnu.org/copyleft/gpl.html
*/
package net.sf.l2j.gameserver.handler.admincommandhandlers;

import java.util.StringTokenizer;

import net.sf.l2j.gameserver.handler.IAdminCommandHandler;
import net.sf.l2j.gameserver.model.L2World;
import net.sf.l2j.gameserver.model.actor.instance.L2PcInstance;
import net.sf.l2j.gameserver.model.entity.Events.Vote;

/**
* @author  xAddytzu
*/
public class AdminCustom implements IAdminCommandHandler
{
private static final String[] ADMIN_COMMANDS = { "admin_setwords", "admin_startvotes", "admin_showvotes", "admin_clear" };
public static String first = "";
   public static String second = "";
   public static String third = "";
   public boolean useAdminCommand(String command, L2PcInstance activeChar) 
   {
   	if (!activeChar.isGM()) 
   		return false;
   	
       if (command.startsWith("admin_setwords"))
	{
		try
		{
			String val = command.substring(14);
			StringTokenizer st = new StringTokenizer(val);
			first = st.nextToken();
			second = st.nextToken();
			third = st.nextToken();
		}
		catch (Exception e)
		{
			e.printStackTrace();
		}
	}
       if (command.startsWith("admin_startvotes"))
       {
       	for(L2PcInstance player : L2World.getInstance().getAllPlayers())
       	{
       		if(player == null)
       			continue;
       		if(player.isOfflineTrade())
       			continue;
       		
       		Vote.getInstance().showVoteHtml(player);
       	}
       }
       if (command.startsWith("admin_showvotes"))
       	Vote.getInstance().showVoteHtml(activeChar);
       if (command.startsWith("admin_clear"))
       	Vote.getInstance().clear();
       
       return true;
   }
   public String[] getAdminCommandList()
   {
       return ADMIN_COMMANDS;
   }
}

 

Vote.java - Index: net.sf.l2j.gameserver.model.entity.Events

/* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2, or (at your option)
* any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
* 02111-1307, USA.
*
* http://www.gnu.org/copyleft/gpl.html
*/
package net.sf.l2j.gameserver.model.entity.Events;

import net.sf.l2j.gameserver.handler.admincommandhandlers.AdminCustom;
import net.sf.l2j.gameserver.model.actor.instance.L2PcInstance;
import net.sf.l2j.gameserver.serverpackets.NpcHtmlMessage;

/**
* @author  xAddytzu
*/
public class Vote
{
private static Vote _instance = null;
private List<String> _IPs = new FastList<String>();
public static int voteCount1 = 0;
public static int voteCount2 = 0;
public static int voteCount3 = 0;
public static Vote getInstance()
{
	if(_instance == null)
		_instance = new Vote();

	return _instance;
}
public void handleCommand(L2PcInstance player,String command)
{
	if(command.startsWith("custom_vote_1"))
	{
		if (_IPs.contains(player.getClient().getConnection().getSocketChannel().socket().getInetAddress().getHostAddress()))
			return;

		_IPs.add(player.getClient().getConnection().getSocketChannel().socket().getInetAddress().getHostAddress());
		voteCount1++;
		player.sendMessage("Thanks for your vote.");
	}
	else if(command.startsWith("custom_vote_2"))
	{
		if (_IPs.contains(player.getClient().getConnection().getSocketChannel().socket().getInetAddress().getHostAddress()))
			return;

		_IPs.add(player.getClient().getConnection().getSocketChannel().socket().getInetAddress().getHostAddress());
		voteCount2++;
		player.sendMessage("Thanks for your vote.");
	}
	else if(command.startsWith("custom_vote_3"))
	{
		if (_IPs.contains(player.getClient().getConnection().getSocketChannel().socket().getInetAddress().getHostAddress()))
			return;

		_IPs.add(player.getClient().getConnection().getSocketChannel().socket().getInetAddress().getHostAddress());
		voteCount3++;
		player.sendMessage("Thanks for your vote.");
	}
}
public void showVoteHtml(L2PcInstance activeChar)
{
	String htmFile = "data/html/custom/vote.htm";
	NpcHtmlMessage html = new NpcHtmlMessage(1);
	html.setFile(htmFile);
	html.replace("%first%", String.valueOf(AdminCustom.first));
	html.replace("%second%", String.valueOf(AdminCustom.second));
	html.replace("%third%", String.valueOf(AdminCustom.third));
	html.replace("%voteCount1%", String.valueOf(voteCount1));
	html.replace("%voteCount2%", String.valueOf(voteCount2));
	html.replace("%voteCount3%", String.valueOf(voteCount3));
	activeChar.sendPacket(html);
}
public void clear()
{
	voteCount1 = 0;
	voteCount2 = 0;
	voteCount3 = 0;
	AdminCustom.first = "";
	AdminCustom.second = "";
	AdminCustom.third = "";
	_IPs.clear();
}
}

BypassHandler.java - Index: net.sf.l2j.gameserver.model.custom

/*
* This program is free software: you can redistribute it and/or modify it under
* the terms of the GNU General Public License as published by the Free Software
* Foundation, either version 3 of the License, or (at your option) any later
* version.
* 
* This program is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
* FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
* details.
* 
* You should have received a copy of the GNU General Public License along with
* this program. If not, see <http://www.gnu.org/licenses/>.
*/
package net.sf.l2j.gameserver.model.custom;

import java.util.StringTokenizer;
import net.sf.l2j.gameserver.model.actor.instance.L2PcInstance;
import net.sf.l2j.gameserver.model.entity.Events.Vote;

public class BypassHandler
{
private static BypassHandler _instance = null;
public static BypassHandler getInstance()
{
	if(_instance == null)
		_instance = new BypassHandler();
	return _instance;
}
private BypassHandler()
{
}
public void handleBypass(final L2PcInstance player, String command)
{
	if(command.startsWith("custom_vote"))
	{
		Vote.getInstance().handleCommand(player, command);
	}
}
}

 

RequestBypassToServer.java - Index: net.sf.l2j.gameserver.clientpackets

		else if (_command.startsWith("Quest "))
		{
			if(!activeChar.validateBypass(_command))
				return;

			L2PcInstance player = getClient().getActiveChar();
			if (player == null) return;

			String p = _command.substring(6).trim();
			int idx = p.indexOf(' ');
			if (idx < 0)
				player.processQuestEvent(p, "");
			else
				player.processQuestEvent(p.substring(0, idx), p.substring(idx).trim());
		}
+			else if(_command.startsWith("custom_"))
+			{
+				L2PcInstance player = getClient().getActiveChar();
+				if(!player.validateBypass(_command))
+					return;
+
+				BypassHandler.getInstance().handleBypass(player, _command);
+			}

 

Posted

That means that you don't know java.

I donot know java but i can understand what that code says

it's not about java knowledge,it's about how clever u are and understand some things

Posted

this is a rly interesting idea. the only problem that i can see is that you will "force" to show the html windows, so if a player is in pvp or killing mobs or smth, he could get some problems. It could be better with a .vote command or smth like that, or even the newbies html, i mean the msg that shows you when you start ("click your mouse to move and use items ...") with the "?" icon could be edited? that could be a good way to show the html

Note: i didnt read the code rly good, also you edited it after i read it, so if i said smth stupid, sorry

Posted

Tested and works but is a problem. If you are in dual box, you can vote with all characters.

[HeRoMaN][ link=topic=169475.msg1301065#msg1301065 date=1281997597]

If SomeOne Tested And Works, Please Reply.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



  • Posts

    • Update: Advanced Rate Limiting Rate limiting is now applied to: Login attempts Account registration Password recovery Email confirmation resends WhatsApp verification Checkout access The system maintains independent counters by IP address and user identity, helping prevent traditional brute-force attacks as well as distributed credential-stuffing attempts using multiple proxies. Brute-Force and Credential-Stuffing Protection Protection is not limited to the visitor's IP address. The system also tracks attempts associated with the account, username, or email address, reducing the effectiveness of attacks performed through rotating IP addresses, proxies, or VPN services. Global HTTP Security Headers Security headers are applied across the entire website: X-Frame-Options X-Content-Type-Options Referrer-Policy HTTP Strict Transport Security These headers help protect the website against clickjacking, MIME-type confusion, insecure referrer exposure, and HTTP downgrade attempts. Secure Error Handling Internal exceptions are recorded in protected security logs while visitors receive sanitized error messages. This prevents the accidental exposure of: Internal file paths Database information SQL errors Server configuration Application stack traces Private Storage Exposure Monitoring The system automatically checks whether the private storage directory is publicly accessible in production. If exposure is detected, a security warning is recorded for the administrator without interrupting the website. This directory may contain licensing information, rate-limit records, and security logs and must never be publicly accessible. OAuth Request Protection Google and Facebook authentication flows use cryptographically random state values stored in the user's session. Returned state values are validated using constant-time comparison, helping prevent OAuth request forgery and unauthorized account-linking attacks. Telegram Authentication Validation Telegram login information is protected through: HMAC signature validation Constant-time hash comparison Authentication timestamp verification Expired-login rejection Secure Verification Tokens Email, password recovery, and WhatsApp verification systems include: Cryptographically secure random tokens Hashed WhatsApp verification codes Automatic expiration Limited verification attempts Resend cooldowns One-time token invalidation Account Activation Protection When email or WhatsApp verification is required, the game account remains restricted until all required verification steps are completed. Unverified users cannot bypass the confirmation process through standard or social login. Secure Upload Processing Administrative image uploads include: Real MIME-type inspection Image-content validation File-size limits Extension allowlists Server-generated random filenames Rejection of invalid or disguised files Original user-provided filenames are never used as the final stored filename. Path Traversal Protection Theme and template identifiers are restricted to validated slugs and must exist in the internal list of allowed themes. This prevents directory traversal and unauthorized local-file access through manipulated template names. Atomic Ticket Transfer Protection Ticket transfers use transactional and durable delivery processing. The balance is conditionally debited, the delivery is recorded before communication with the game database, and failed deliveries remain pending for safe reprocessing. This helps prevent: Free-item delivery Inconsistent balances Duplicate delivery Partial transaction failures Lost transfer records Concurrent Balance Protection Administrative balance adjustments use database transactions and row-level locking. This prevents simultaneous balance operations from overwriting each other or creating inconsistent account balances. Secure Redirect Handling Redirect values are sanitized against header injection, and external redirects are restricted to HTTPS destinations. Password Security Improvements The website uses modern password hashing for player-panel accounts and bcrypt with a configurable cost for supported game-server account systems. Compatibility is included for game-server implementations requiring the $2a$ bcrypt prefix. Duplicate Payment Prevention Built-in protections include: Idempotency control Transaction reference validation Payment status verification Unique external payment references Database transactions and rollback Durable payment history Completed-order verification These protections prevent: Double credits Repeated processing Duplicate payment callbacks Incomplete financial operations Signed Payment Callback Protection Payment callbacks are protected through: HMAC-SHA256 authentication Constant-time signature comparison Signed callback timestamps Callback freshness validation Shared callback secrets This helps prevent forged payment notifications, callback manipulation, and replay attacks. SQL Injection Protection The database layer uses: PDO Prepared statements Parameter binding Controlled internal allowlists for dynamic identifiers User-controlled values are not directly concatenated into SQL queries. XSS Protection Output and form data are protected through: HTML escaping Attribute escaping Input filtering HttpOnly session cookies MIME-sniffing protection Frame embedding restrictions These measures reduce the risk of Cross-Site Scripting, malicious HTML injection, session theft, and clickjacking. CSRF Protection Sensitive forms and administrative operations use session-based CSRF tokens. Requests without a valid token are rejected, helping prevent unauthorized actions performed through malicious external websites. Secure Session Protection The session system includes: HttpOnly cookies Secure cookie support SameSite restrictions Session ID regeneration Authentication state validation Session timeout controls These protections reduce the risks of session fixation, session theft, and unauthorized account reuse. reCAPTCHA Protection Google reCAPTCHA may be enabled on sensitive public forms to reduce: Automated account registrations Spam submissions Bot login attempts Automated password recovery abuse Confirmation Resend Limits Email and WhatsApp confirmation resends are protected through: Cooldown periods Rate limiting Expiring verification codes Attempt counters This prevents verification-message flooding and excessive external API usage. Licensing and Anti-Cloning Protection The website includes centralized licensing controls with: License-key validation Domain binding Signed license responses Cached license validation Temporary offline grace period Circuit-breaker protection Unauthorized-domain rejection These measures help prevent unauthorized installation, cloning, and redistribution of the system.
    • Tool that allows you to download the Lineage 2 game client directly from the official publisher CDNs. It fetches the CDN's file list and downloads every patch file, decompresses it (LZMA / Zip) and writes the finished client to disk — and can resume or repair an existing installation instead of starting over. It runs several client downloads at once through a batch queue, so you can prepare multiple regions or versions in a single session.   Supported: NCSoft CDNs (TW / KR / JP / NA) and  4game CDNs(RU / EU)   Download: https://drive.google.com/file/d/11SDcNASqO2GKOBT79LFu7mqvSRSJZvBS
    • https://l2avokado.com/ Hello everyone,   After some time of development, we've decided to open L2Avokado to the public in its current development stage. We're looking for players who enjoy Interlude and would like to help shape the project before its official release.   This isn't a "launch" announcement. Instead, we're inviting the community to log in, explore the server, test the systems we've built, and provide honest feedback. Whether it's bug reports, balance suggestions, progression ideas, or quality-of-life improvements, we'd love to hear them.   Our goal has always been to create an Interlude server that feels familiar while offering a fresh progression experience. We've intentionally avoided custom weapons, armor, and client modifications. Instead, we've focused on redesigning progression through reworked hunting grounds, quests, crafting, and gameplay systems while remaining compatible with a clean Interlude client.   At this stage, the core progression path has been implemented, including the main hunting grounds, quests, custom systems, and events. However, as the project is still under active development, there will inevitably be bugs, balance issues, and areas that require further polishing.   This is exactly why we'd like your help.   We're looking for players who are willing to: Test gameplay and progression. Report bugs and exploits. Suggest balance improvements. Share ideas for new features or quality-of-life changes. Help us build a server that the community genuinely enjoys playing.   The Client and System downloads are already available on our website, so you can jump straight into the game. We're also working on a dedicated launcher that will simplify installation and future updates.   If you're interested in helping develop a unique Interlude project and want your feedback to genuinely influence the direction of the server, we'd love to have you with us.   We look forward to seeing you in-game and hearing your thoughts on Discord. https://l2avokado.com/
  • Topics

×
×
  • Create New...

Important Information

This community uses essential cookies to function properly. Non-essential cookies and third-party services are used only with your consent. Read our Privacy Policy and We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue..