Recent changes to bugs

Other Notes Section Deletes with Certain Unicode

Gunther — Sun, 19 Nov 2017 00:55:59 -0000

I'm not sure the cause, but certain entries cause the Other Notes sections to self-delete, amongst others.
An example...

Blóð-Þyrstr, +1 Longsword

... and...

REMEMBER: Add the following spells to the cloistered cleric's class spell list:
0- message
1st- erase, identify, unseen serveant
2nd- fox's cunning
3rd- illusory script, secret page, tongues
4th- detect scrying
6th- analyze dweomer
7th- sequester
9th- vision

Languages, currency, other notes do NOT save

madtinker — Tue, 10 Dec 2013 23:28:30 -0000

I'm using the profiler through coyotecode, and for some reason any languages, currency, or other notes I enter on a character do not save. I click "save," everything appears to work, but when I reload the page any changes I made are gone.

XSS vulnerabilities

Josh Watzman — Sun, 25 Jul 2010 06:54:36 -0000

There are some serious XSS problems. I see little to no attempt to sanitize data that comes out of the database before it's just dumpted into HTML in most of rpgwebprofiler. Character names and campaign names are checked on the way in upon creation, but not upon edits in the case of campaigns (character names are immutable so this isn't an issue). Attached is a patch which attempts to fix the brunt of this for campaign names and descriptions, but the entire app really needs an audit for XSS holes.

Examples of holes fixed by this patch:
- create a campaign; change its name to "<blink>XSS</blink>"
- set a campaign description to "XSS<script language=javascript type=text/javascript>var x=String.fromCharCode;var s=x(88)+x(83)+x(83);alert(s);</script>"

Error in phpBB3 authentication (with fix)

Drakkim — Wed, 03 Feb 2010 16:23:04 -0000

There is an error in 'root_profiler/engine/authentication/phpBB3.php'

Find (around line 53):
create_user($userdata['username']);
Replace with:
create_user($user->data['username']);

Install problems

Beanman1 — Thu, 26 Mar 2009 23:56:18 -0000

I have recently downloaded this app and tried installing it on my web space @ www.profiler.nybn.org. I followed the install instructions yet every time I try to load the page, I get the following error: Fatal error: Cannot instantiate non-existent class: sid in /homepages/24/d192811602/htdocs/NYbN/profiler/index.php on line 27

I have checked the file paths and I do believe they're all correct. the subdomain points to folder X and the folder /root_profiler is in folder X.

If anyone can help me figure this out, I'd be very greatful. I really want my game community to start using this tool.

information rendering

Anonymous — Sat, 09 Aug 2008 18:01:08 -0000

Ok my problem is this, when I load up a new character page and enter in all the information for that character, it displays it just fine. However when I save it and exit that page and try and view it again everything after the weapons section disappears. Even the prefilled information in the skills section. Is this a problem with the coding of the program or something on my server? Any help you can offer would be much appreciated. Please contact me at dnd@jhmunlimited.com.
Thank You

phpBB integration doesn't work

Alvin Brinson — Sat, 27 Oct 2007 03:42:14 -0000

I get the following error loading the profiler homepage after logging into the forum:

Fatal error: Call to a member function on a non-object in /home/myusername/Profiler/root_profiler/engine/templates.php on line 127

I have not been able to get phpBB integration to work at all due to this.

The HasAccessTo functions SQL query

Digital Xero — Sun, 08 Jul 2007 20:14:04 -0000

This query has serious optimization issues. For my profiler this query takes an average of 50 seconds. I have reworked it so it now take an average of 0.0021 seconds

$sql = sprintf("select c.id as id from %s c where c.owner = '%s' and c.id = %d ".
"union select c.id as id from %s c, %s n where c.campaign = n.id and n.owner = '%s' and c.id = %d ".
"union select cid as id from %s where pname = '%s' and cid = %d ",
$TABLE_CHARS, $name, $id,
$TABLE_CHARS, $TABLE_CAMPAIGNS, $name, $id,
$TABLE_OWNERS, $name, $id);

XML Upload

Anonymous — Wed, 18 Apr 2007 03:45:01 -0000

Had trouble doing xml sheet uploads until I manually created an "uploads" folder to the root directory(the one in the config.php file).

New character sheet help

Anonymous — Sun, 14 Jan 2007 18:13:44 -0000

Howdy,

I am hoping I can get some help with my character sheet design - in the area of printing and page breaks.

First let me start by saying that until I found your RPG Web Profiler software, I had never written in PHP before. So keeping this in mind, I may need a descriptive reply.

Second, I play Lord of the Rings / Star Trek by Decipher, and since you guys did not have a sheet of this nature in the templates, I had to design one.

I used the Serenity sheet as a template, as it had the most basic functions and taught myself how the PHP worked (and I am hoping I am correct in that it is PHP... hee hee). Anyway, I have my sheet up and running and it works great on the profiler and we have a large number of online players subscribing to use the sheet.

The problem I have is two-fold:

Problem 1: I cannot figure out how to make a cell on the sheet table equal another cell (i.e. I would love to Attribute modifiers auto-fill to the appropriate skills when you type in the value of the modifier in the attributes section).

Problem 2: I do not know how to use the page break coding on the main.css to break the page up so that you do not loose valuable character information when you want a printout.

If any help could be offered, it would be greatly appreciated. I have no problem sending you my sheet template files, and I invite you to take a look at our sheet on the site, and feel free to offer it in any future upgrades. I have designed the same relative sheet for Lord of the Rings:

http://roleplay.avioc.org/profiles/view.php?id=14

and Star Trek:

http://roleplay.avioc.org/profiles/view.php?id=17

I look forward to hearing any word, and you may contact me at djoos5@yahoo.com.

Doug