Flux Control Panel for Hercules

I noticed that my addons are not working with emphaino theme but its working with the default theme..
In each of your addon's folder there is `themes` folder which contains views for all themes. Just make a copy of `default` folder and rename it to `emphaino`. You should be able to use your addons with new theme then. If it doesn't look good you'll have to make some edits (but it should be good enough).

 
Last edited by a moderator:
In each of your addon's folder there is `themes` folder which contains views for all themes. Just make a copy of `default` folder and rename it to `emphaino`. You should be able to use your addons with new theme then. If it doesn't look good you'll have to make some edits (but it should be good enough).
Thank you so much..!
 
in that case i'd recommend you go visit your eye doctor, because that has not been said here.

We saw many of our users struggling with their fluxcp installations and, since the fluxcp repos have failed to help them, we decided to step in and fork to help these users ourselves. and that is all there is to it. I myself like ceres better, but our users were struggling with flux and not ceres, so we're forking flux to help these users.
No need to be unpleasant with my awesomes greens eyes
default_biggrin.png
it's what I personally feel when reading this topic.To be honest there is no officials control panel suitable for Ragnarok Online, that's why I think it's better to start a new one from scratch instead of using an outdated one, with some conception fails and criticals exploits.

Did I hear from the past than Hercules was build to look further ? FluxCP is definitively from the past (as ceres, stargame, rudra, etc.).

 
I don't really see problems with piece of software being few years old. If there are issues with it, they can be fixed, code can be improved etc. Writing new application from scratch doesn't guarantee it would be better. More likely there will be some new bugs in it, and it will take time to find and fix them all. FluxCP is matured enough, and as far as I know, there haven't been any major problems with it, despite it being used in hundreds of servers.

 
Re-writing this pieces of software allow to get better performance, cleaner code, maintainable code, knowing what can be avoid or optimized, using latest technologies features for better experiences or speed up the process, remove deprecated element...

A lot of big softwares are rewriting from scratch from a version to another (just in PHP framework for example: Laravel, Symfony, ...), and they never get so optimized and easy to use.

To finish, it's not because you don't know or heard about exploits that they don't exist.

Lucky admins, RO hackers seems to have a pretty bad level and just know about SQLI, LFI (and DDOS of course)
default_smile.png


 
Just a suggestion, will it be much better if we change the item database view instead of showing the item scripts, it will show the item description of the item.
default_smile.png


 
To finish, it's not because you don't know or heard about exploits that they don't exist.

Lucky admins, RO hackers seems to have a pretty bad level and just know about SQLI, LFI (and DDOS of course)
default_smile.png
How would a full rewrite help preventing these attacks? I feel that ditching an old (but maintained) and well tested codebase to rewrite it from scratch, would have the opposite effect and risk creating more security vulnerabilities, other than breaking compatibility with any old addons and themes. As someone once said, if it ain't broke, don't fix it.
 
Re-writing this pieces of software allow to get better performance, cleaner code, maintainable code, knowing what can be avoid or optimized, using latest technologies features for better experiences or speed up the process, remove deprecated element...
If we followed that logic, the very first piece of software that should be thrown into the trash bin and rewritten from scratch is athena/hercules. FluxCP has actually a well structured and documented code, quite easy to understand, follow and maintain. Did you even take a look at its source? You're talking about using latest technologies.... which one do you exactly think could be used in a new, better control panel, that isn't present in flux? Just asking, cause all your arguments are valid but you haven't show us yet how they apply to fluxcp.

 
@Gepard
Rewriting an emulator from scratch is a lot of work, you can't compare it to a CP. Yeah FluxCP is the most advanced CP currently available for RO (talking about structure, organization, documentation and support), but it's not for this reason it's the best code ever.
It was a list for general reasons to rewrite a code, not specialy related to FluxCP. Just talking about technologies and organization (not about features since it can be add at all time) :

  • HMVC
  • ORM
  • Namespace
  • Anonymous function/Closures
  • Optionnal ajax support
  • Optionnal Template Engine
  • Hook system

And of course I investigated FluxCP source code, that's why I complain about it, its structure and its exploits.

@Haru
Well I have to agree, if you don't have a talented web developer (and specialized in security audit), there is no point to create a new CP from scratch, you will just create a complete copy of others CP with maybe some more hacks.

 
Not every new technology or design pattern is worth following or being used. Software doesn't need to be state-of-the-art to be a good piece of software. You seem to be focused too much on internal aspects of the control panel, and forgetting that first and foremost it is a tool, an utility. It has to work and work properly most of the time - that is what is expected from a program. Then, it should be easy to maintain and develop. (BTW, using latest technologies is great way to create a steep learning curve for anyone who'd like to contribute to the project, so it can have exactly opposite effect) And only then it should be beautiful (code-wise, internal design-wise, not talking about appearance here). If you have too much free time nobody is holding you from using all kind of latest technology and writing your own state-of-the-art control panel for ragnarok server.

Also, if you realized there are some real exploits in current code of FluxCP, you should just fix it or at least report it, instead of complaining. Otherwise, I can't take what you're saying seriously. I respect you having great deal of knowledge about webcoding, but sometimes you need get off your high horse and help less experienced people or you just start to sound like a prick. Now I have the feeling that it's you advertising yourself in this topic, trying to make an impression how good you are at things, and how cool would be the control panel you could write. Please refrain from it, showcase/bragging topics belong to other sections.

Once again, point to any bug/exploit in current fluxcp, or at least justify using any of the stuff you mention with real use-case examples, instead of making general remarks about webcoding. All input is appreciated, but it has to be more specific. "FluxCP is not using latest technologies" is NOT a useful suggestion. Useful one would be: in file foo.php, we could use new feature from foolib ver. 1234 so that we can simplify the code in file bar.php and make it easier to create new foobars for baz module.  

 
Don't say something I didn't write.
 
It's not because I post a list of technologies than all have to be used, even if it's a base from a good framework, the pros and crons have to be studied before writing a piece of code.
If I had enough time to write a CP, it will be already done for years but I already have some problems to regularly work on my personal projects to add a new one to the queue.
 
The exploits i were talking are already in discussion with Xantara and CalciumKid to find the better approach to fix it without potentially provoke a massive hack of a big part of pservers. The main problem of this exploit : it required some fix on templates folder but no servers are using the default one because of theirs custom design (so it's an update that will break all current servers).
 
I'm not here to promote myself, just to discuss but it seems like when an opinion diverges from yours we just are the bad guys and you need to spit on me to discredit myself and all I said, just grow up guys, I think you are enough older to have a discussion without bashing the guy in front of you.
 
Well then, if pros and cons have to be studied, then go study first, and only then come here and share your wisdom. Cause right now you're talking some totally general stuff about how cool would it be to do this and that, but you are not willing to discuss any specific issues related to FluxCP, which this topic happens to be about.

I'm not discrediting anything you say, I'm just pointing that what you're saying isn't really useful for further FluxCP development, so in fact irreleveant. I don't see the point in discussing "why FluxCP isn't so awesome as I'd like it to be" or similarly abstract stuff, but unfortunately that's exactly what you're trying to "discuss" here. 

It's you who started the bashing without giving any reasonable points and it's you who first came to weird conclusions ("this topic is fluxcp ad"). If you claim that some app has "conception fails and critical exploits" you must have something to back up your words. That's what I expect from a serious discussion.

That being said, I'm waiting for a PM with details about the exploit you mentioned.

Last but not least, I'm sorry for being so straightforward. This is just how I am, and I'm not really hostile towards you or anything like that. 

 
  • Upvote
Reactions: Ind
Sorry, it was not my intention to troll you all with a "Apple Sucks !" in this Apple Store, I didn't know there were so much fanboy here.
 
Since I'm lazy and will have vacations in some hours, just read the above posts to get answers. I didn't ask to rewrite FluxCP or updating it, but I suggested to create a new one with solid foundation. If you don't want, who cares ? : it's a suggestion.
 
If you want to get informations about the hack I will add you to our discussion. Talking about how to exploit a zero-day in public, isn't something smart at all.
 
I think you're missing GD php extension. How to get it and install it and so? I don't know but that page explains you how to.

Maybe run a phpinfo() in your server before and see if you have GD installed?

P.S.: I will try to also make an es_ES translation, but preferably not Spanish/Spain but as much neutral Spanish as I can.

 
Last edited by a moderator:
what would be the problem for this?

no Captcha?

ewq.jpg
If CAPTCHA is not working try to use reCAPTCHA

application.php in line 81 to 83

  'EnableReCaptcha'   => false,   // Enables the use of reCAPTCHA instead of Flux's native GD2 library (http://www.google.com/recaptcha)  'ReCaptchaPublicKey' => '...',   // This is your reCAPTCHA public key [REQUIRED FOR RECAPTCHA] (sign up at http://www.google.com/recaptcha)  'ReCaptchaPrivateKey'  => '...',   // This is your reCAPTCHA private key [REQUIRED FOR RECAPTCHA] (sign up at http://www.google.com/recaptcha)

@Gepard

Can i ask if Flux CP CMS Addon by CalciumKid is compatible with the theme? well it seems to work fine but the News and Update part are missing its all blank after adding this in the themes/emphaino/main/index.php

Code:
<?php if (!defined('FLUX_ROOT')) exit;        $this->redirect($this->url('news','view'))        ?>
 
what would be the problem for this?

no Captcha?

ewq.jpg
If CAPTCHA is not working try to use reCAPTCHA

application.php in line 81 to 83

  'EnableReCaptcha'   => false,   // Enables the use of reCAPTCHA instead of Flux's native GD2 library (http://www.google.com/recaptcha)  'ReCaptchaPublicKey' => '...',   // This is your reCAPTCHA public key [REQUIRED FOR RECAPTCHA] (sign up at http://www.google.com/recaptcha)  'ReCaptchaPrivateKey'  => '...',   // This is your reCAPTCHA private key [REQUIRED FOR RECAPTCHA] (sign up at http://www.google.com/recaptcha)

@Gepard

Can i ask if Flux CP CMS Addon by CalciumKid is compatible with the theme? well it seems to work fine but the News and Update part are missing its all blank after adding this in the themes/emphaino/main/index.php

<?php if (!defined('FLUX_ROOT')) exit;    $this->redirect($this->url('news','view'))    ?>
yah i did that
 
Back
Top