I realized that I was still running Voided Alliance on my server. This obviously concerned me because, as you may know, I wrote the game several years ago (before I knew enough about security to be writing something so complex.) If you have looked at the source code, first let me apologize for making you ill, second: you will know that the code is very amateur.
It wasn’t too long before I found SQL Injection attacks left, right and center. Far too many for me to fix, especially since market distribution of the patch would be impossible. I can only hope that very, very few people are actually running the code.
The fact that I was never hacked before seems to have been because of PHP’s Magic Quotes, surprising enough. Now, because of the fact the Magic Quotes “security” feature is disabled, it is no longer “secure”. I would urge anybody who is currently running a script, for whatever reason, take necessary precautions (such as: Not running it.)
I have since taken down the downloads of Voided Alliance, they will not be going back up. I have told everyone a long time ago that I am no longer supporting it. I have now taken down the VA source running on my server as well.
I hope everybody realizes that this is a very real danger and takes necessary precautions. I don’t want to ruin anybody’s day, week or whatever because of a nasty SQL injection attack.
Regards,
Eric
Early this morning, I finished the rendering of the map. Now I am done with the movement and I have also improved the look of the stars. (As well as added more colors.) Now, you can look around the map by clicking either 4 directions. It moves you 256 units in the direction you chose. The colors are random at the moment because I don’t have any means on determining star color.