Jump to content

[Guide] How to set account manager


Recommended Posts

If it's double post please delete.

 

This Guide experts in Creating your servers databases,databases users,configuring Daedalus L2J Account Manager,in a way that your server is fully protected.

This Guide is addressed for account managers,installed in a different server than the server your gameserver is running on,with your account manager configured properly,to be able to connect to your gameserver's loginserver database securely.

 

 

This is a very important part about your server's security.

 

First of all i suggest you to have seperate databases for loginserver and gameserver.

A good choice is to make a database called loginserver for your loginserver(Login server database includes,your server's accounts basically)

As for the  gameserver i suggest you to make a database called gameserver.

I assume you already know how to install your l2j server database in 2 seperate databases.(one database for login server,one database for gameserver)

Now,that you have your databases installed,make sure you make the step 1 from database part.(This step is to later in this Guide)

 

Okay,you must now set up the proper permissions user/database permissions in  order to proceed to the Account Manager Tutorial.

 

In this tutorial you will create 1 extra user for your account manager in your website to have access in your database.

 

1)Open your Navicat. (www.navicat.com)

2)open your connection to the localhost

3)Click the "Manage Users" icon.

4)Now you see there is already a user in your mysql server.The (root@localhost) user,click create new user.In the hostname field write the server ip that you have your website.

(Note**The ip i am telling about isn't the ip you see in your Cpanel,or the ip you got from your hosting account information.It is the true server ip that your website is hosted in this server,This is because the ip of your website has blocked inbound traffic,and your script won't work.So you must ask your hosting provider what is the server's basic ip address)

Then the ip address they told you,you must put it in the hostname field.

For username we are gonna use "web_acm" without the quotes for this tutorial.

As for the password you can use whatever you like,but make sure you write them down on a paper,because you can forget this information.

Okay,now you have succesfully created the user that has access to your loginserver database, from your website.

5)You must now,give proper permissions to that user.Now left click,on your web_acm user,you will now see your 2 databases.(loginserver,gameserver),left click again to loginserver.(now you can see some tables)left click to accounts table(you can now see some fields.The only permissions you must give are "Select, Insert, Update".

Now do the same thing for the account_data table,but now you must give these permissions."select, insert, delete"

6)Done,your permissions are set correctly.

 

                    ACCOUNT MANAGER TUTORIAL

 

 

Download it's latest version by clicking this link.

New Version  :Account Manager  http://trac2.assembla.com/l2j_manager/changeset/latest/account_manager/?old_path=/&format=zip

SVN Version : SVN http://svn2.assembla.com/svn/l2j_manager/

Timeline : Account Manager http://trac2.assembla.com/l2j_manager/timeline

Old Version : Account Manager http://heliosdaedalus.free.fr/account_manager.tar.gz

Follow the steps bellow.

 

 

1)Upload this .zip folder in your webspace,in plublic_html(if you have Cpanel as your  control panel) and if you don't have Cpanel this is probably your web folder (www) that you need to upload your .zip file.

2)Extract it.You will see now a folder called account_manager.

3)Rename account_manager folder to acm.

4)We need to set permissions for some files in order to install and make the account manager work.

5)In the root directory of acm (/acm/) set permissions of all files to 644.

6)Inside of (/acm/libs/) set permissions to all files to 644.

7)Inside of (/acm/libs/plugins/) set permissions to all files to 644.

8)Inside of (/acm/libs/internals/) set permissions to all files to 644.

9)Inside of (/acm/language/) set permissions to all files to 644.

10)Go in (/acm/classes) and change permissions of all files to 644.

11)Inside  (/acm/templates/) you can see the templates you have.For each template you want to use,go inside it's folder and give 644 permissions to all the files,and then go to its /image folder and give 755 permissions to all images too.

Warning!

Don't try to give 644 privilenges to the files of a folder,by giving 644 to the folder,this will not change the privilenges of the files inside.

 

Configuration part

 

Configure in the (/acm/) the config.php to match your loginserver's database settings.(in the hostname put your dedicated server's ip,for database use your loginserver database,and for user use the user you created for your website to access your loginserver "web_acm is the user used in this tutorial",in the password put your user's password)

 

Database part

 

Execute the db.sql to the login server database.

 

Test

 

Run the install.php to see if all things go right.

If you see all things as ok then all went right.

 

 

Finished!

Your Account Manager is now perferctly configured and your database is secured.

Have fun.

 

 

Tutorial not mine, original source http://www.hopzones.net/forum/topic/116/

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.


  • Posts

    • Well, sorry not sorry for resurrecting old topic, but I believe it's ultimately stupid to implement license checks like Vilmis did 🙂   private static String url = "jdbc:mysql://185.80.128.233/" + getData("Zm9ydW1fZGI="); private static String username = getData("bXJjb3B5cmlnaHQ="); private static String password = getData("Y29weXJpZ2h0XzEyMw=="); con = GlobalDB.getInstance().getConnection(); PreparedStatement statement; statement = con.prepareStatement("SELECT field_6 from core_pfields_content WHERE member_id = ?"); statement.setInt(1, Config.FORUM_USER_ID); ResultSet rset = statement.executeQuery();   This awesome way of coding things leaves us with base64-encoded credentials and DB exposed and accessible globally 😉 Btw he checks his licensing data from some plugin generated table his forum uses. Vilmis took action and ensured that mrcopyright user would have only needed accesses and rights for this operation. But he forgot to ensure that his INFORMATION_SCHEMA database would not be exposed and readable... That leads us to fully readable server variables like version used (10.1.26-MariaDB-0+deb9u1 - pretty ancient DB and OS, I'd assume). From here you can go south and do some kinky stuff, if you want and have knowledge for that. But who cares, right?   Ooh, table core_pfields_content field_6 is IP address which is checked by FORUM_USER_ID. Yep, you can query all IP addresses there (124 of them right now) and also do whatever you want with them! 🙂  The most fun part? Files source has been shared what, more than 2 years ago?  Vilmis still uses very same credentials and never changed it after sources exposure - who cares. Although, "sources" may be way too strong word here. If anyone still use paid Orion versions, I'd suggest packing your shit and leaving immediately, or at least fix this incompetent fool caused problems. It's obvious Vilmis don't care or maybe doesn't even know from the first place how to solve this problem (hint hint - tiny PHP Rest API microservice which would do absolutely the same but without exposing sensitive data?). By doing that, he exposes his infrastructure and YOUR data, and he does that for more than 2 years now 🙂 Developer of century!    
    • rename the l2.bin into l2.exe
    • L2LIVE.PRO- Dynamic Mid-rates Essence Seven Signs GRAND OPENING - July 5, 20:00 GMT+3 (EEST) TEST SERVER IS OPEN - COME AND CHECK IT OUT TODAY! Join our community and be part of it at: https://www.l2live.pro https://discord.gg/k3NMgR4Dmu   Server description * EXP/SP: Dynamic (x1- x100 based on your level, *before* Sayha and EXP buffs * Adena: x50 / Item Drop: x10 / Fishing EXP increased / Attribute EXP increased * Simplified gameplay to stay in the loop while not spending hours and hours farming * Starter Pack containing very useful items for beginners * MP replenishing potions with auto-consumption * No overpowered donations L2LIVE shop * All spellbook coupons, pet spellbook coupons and master books are sold via Game Assistant * Additionally you can buy SP pouches, enchanted talismans, pet training guides and various other consumables for Adena and L-Coin * More items such as cloaks, more talismans, agathions, belts, pendants, enchantment scrolls of various grades, evolution stones, etc will be added! Shop server as a shortcut, and all retail-like ways of earning items are still here! L-Coins * Drops with small change and in random amounts from Lv60+ monsters  * All raidbosses drop random amount of L-Coin Pouches generating up to 420 Lcoin per unit. **Grand Olympiad and Events** * Grand Olympiad is held week day * Format is 1v1, unlimited weekly fights  * Heroes are declared weekly at Sunday * There are three automated events - TvT, CTF and Deathmatch, running at evenings * Orc Fortress, Battle with Balok, Keber Hunter, Archievements Box, Daily Gift Calendar provisional events are active too Custom user commands * .offlineplay command, your character will keep playing till death or server restart * .offlineshop command, keeps your shop sitting until all items are purchased * .apon / .apoff - enable/disable HP/MP autoconsume And lots of other small improvements are waiting for you!   Join our community and be part of it at: https://www.l2live.pro https://discord.gg/k3NMgR4Dmu
  • Topics

×
×
  • Create New...