iQuest Studios

It seems that progress on ALS is pretty much on track, if not faster than I anticipated. Here’s the changelog for today so far.

• Added themes and language support to reset.php.
• Fixed a vulnerability in the reset password feature where accounts with the same PIN may result in a changed password for these accounts.
• Removed Password Strength Checker. Too buggy.
• Added get_user_info function that will return the user’s data in an array.
• Added themes and language support to changepass.php.
• Updated the english language file (alslanguages/alslang-english.php). Added language file version check to prevent issues in older systems.
• Added session_auto_expire() function to facilitate session expiry. Session Expiry period defined in config.php.
• Added lastip() function which will return the value of the IP where the user last logged out.
• Added check for allow_url_fopen setting during installation. Displays a suitable warning message if the setting is turned off.
• Fixed a vulnerability in the registration script that may allow a malicious user to use it to spam someone’s inbox

The nightly build with the above updates is now available for download! If you have purchased the source code, please contact me via the contact link above to receive a copy of the source code.

Downloaded a total of 10 times

If you encounter any bugs, please report them to me as soon as possible! This is important as there were a lot of rewritten code in this build which may not have been tested extensively. However, this build also fixes a lot of vulnerabilities and you are strongly recommended to upgrade to this build.

Till next time,
cheers

Tags: Advanced Login System

I am glad to announce that I have made some progress on ALS and I might be able to release a nightly build tomorrow.

Here’s the changelog for today:

• Session encoding
• Make use of remote fopen to check for updates. Update checking should be more stable now. (note: hosts with allow_url_fopen disabled will not be able to check for updates. I am still working on that. )

Till next time,
cheers

Tags: Advanced Login System

I am disappointed to say that my work attachment at Trek is nothing short of being utterly boring and a complete waste of time. And the sad thing is, it is going to last another 2 weeks. I suppose the only thing interesting that I am going to pick up from this attachment is the ability to write Windows Application using PHP through WinBinder. And maybe a little of Cocoa (at least they have a Mac Mini there for me to play with).

I shall not bore you with details of my work attachment, rather, this post is about the FINAL version of ALS v0.03B. Yes, admittedly, it has been almost a year since I released the latest available build. And many posts promising updates to the system resulted in nothing. However, I am determined to release the last beta version of ALS by the end of this year, following which I will go on a development hiatus as I study for my A Levels.

I have already made a few minor changes to the code, including cleaning up the comments and commented out code from previous versions, as well as turning some of the code into functions that you guys can use if you all wish to expand the system and fixing of some bugs such as the remember password feature and plugging security leaks.

Here is the full feature list of what’s upcoming:

• Full Theme and Language Integration (a long promised feature)
• Session Expiry after a certain period that can be both user and admin defined
• Greater theme flexibility through more extensive use of CSS
• Development Function in the form of database querying functions. (use them to get more info about a particular user
• Option to extend the number of fields in the registration form
• Encoding of the user session (for greater security
• AJAX Functionality (not sure how far I will go with this one)

As I complete each feature listed above, I will release nightly builds as well as security patches to any bugs I may find along the way. So keep checking back to this page!

Till next time,
cheers

Tags: Advanced Login System, Attachment

Did the title get you excited? Then I am sorry to disappoint. The ALS patch will not be anything big scale, and only apply to the 2nd Preview Version of the Third Beta Series. Basically, it a newer version of the current English Language file. If you ever bothered to check your PHP Error Log, you might notice that it has gotten quite large, especially if many many visitors use the ALS everyday. This is because of the number of PHP Notices generated by poorly defined constants in the file, so basically, the update fixes that. In the long term, it may mean saving a few hundred MB of your space (depending on how often your error log is cleared). So look out for that.

I am also going to get an online store to facilitate the purchase of ALS source code. It’s starting to get troublesome to keep replying to emails with the same information every time someone wishes to purchase the source code from me. And it’s also a lot more convenient for the users too. I just need some time (which I hardly have) to find a suitable script and install it on my server. Will update you guys on this.

I love “Viva La Vida”,a new song by Coldplay, from their upcoming album,Viva la Vida or Death and All His Friends. First heard it on an Apple ad.

Till next time,
cheers

Tags: Advanced Login System, coldplay, online store, viva la vida

I have received countless bug reports on a MySQL error when attempting to install the 1st Nightly Build. The script will give a “table missing” error when attempting to run the script. Now, after looking into the code, I finally realized why.

Basically, during some phrase in my development, I moved some MySQL commands (related to anti-brute-forcing) to the file config.php. Therefore, when you run the script for the first time, it will actually attempt to execute the commands on the table first, hence resulting in the error as the tables have not even been installed. I missed out on this as I already had the tables installed before I made the changes to the code, hence I was unable to generate this error, so it left me puzzled for a while as to why so many users were reporting this problem.

Anyway, the fix was pretty simple, just move the code to check for the existence of the database tables to be executed before the MySQL commands. So here’s the updated files. (You would need to download the Nightly Build first, then replace the files with those in the file below.) I am sorry that it took me so long to figure out the reason behind this problem.

Downloaded a total of 434 times

Till next time,
cheers

Tags: Advanced Login System, Nightly Build, update