• 0

    posted a message on Addons are now enabled on MoP
    Does anybody know why it's not possible to test zhCN on BETA [5.0.3.15851]? Every other locale works.

    On PTR (since 4.3.2) all locales (including zhCN) are available.
    Posted in: General Chat
  • 0

    posted a message on Addons are now enabled on MoP
    wow: [5.0.3.15851 BETA]


    AreAccountAchievementsHidden()

    SHOW_ACCOUNT_ACHIEVEMENTS = "Display Only Character Achievements to Others";

    OPTION_TOOLTIP_SHOW_ACCOUNT_ACHIEVEMENTS = "Turning this option on will only display your character achievements when people inspect you or use the Armory web site.";


    This is a step in the right direction.

    Now let's do the next step:
    I want an option that disables the ability to inspect my character on the Armory website completely.


    edit:
    true, the opt-out thing is <snip>. this option should be enabled by DEFAULT. that's the way to go....
    Posted in: General Chat
  • 0

    posted a message on DrainSouler
    oops



    Edit:

    DrainSouler-r43.zip:
    http://www.wowace.com/addons/drainsouler/files/

    Changelog-DrainSouler-r43.txt:
    This is for Mist of Pandaria only.

    !!! DrainSouler is now a 'channeling spell'-tracking addon for affliction warlocks.
    !!! (You can use it with any warlock spec, but it's most useful for the affliction spec.)

    - update for 5.0.4.15913 Beta

    - added Drain Life, Harvest Life and Malefic Grasp
    (Drain Life and Harvest Life seems to work a bit strange compared to Drain Soul and Malefic Grasp, this spells gets currently no benefit from haste ... intended?, todo? or bug? ... let's wait for next beta release)
    - added slash commands ('/ds' or '/drainsouler') to open/close configuration
    Posted in: General AddOns
  • 0

    posted a message on Addons are now enabled on MoP
    RegisterUnitEvent is new. That's a really nice update.

    I want some similar function for COMBAT_LOG_EVENT_UNFILTERED or a PLAYER_COMBAT_LOG_EVENT_UNFILTERED event...
    Posted in: General Chat
  • 0

    posted a message on DrainSouler
    DrainSouler-50001beta-1:
    http://www.wowace.com/addons/drainsouler/files/

    Drain Soul Notifier for Affliction Warlocks. Notifies you if target health is at or below 20% - with Icon, HP%, TickCount, TickDMG, TickTimer, TickSound and 20% WarningSound.
    Posted in: General AddOns
  • 0

    posted a message on Addons are now enabled on MoP
    The current (5.0.1.15799) tocversion ( GetBuildInfo() ) is 50001 (not 50000).

    Is this because of beta?
    Posted in: General Chat
  • 0

    posted a message on Panda faction (MoP beta)
    Thanks.


    edit:
    Here is an update: (tested ingame with Beta Patch 5.0.3.15851)

    The PLAYER_LEVEL_UP thought was crap.

    The Alliance/Horde faction for a pandaren is indeed available after the event NEUTRAL_FACTION_SELECT_RESULT.
    Posted in: Lua Code Discussion
  • 0

    posted a message on Panda faction (MoP beta)
    Is it possible to execute macros with API calls in current Mist Of Pandaria beta version?

    If so, can someone with a MoP beta account please post the following result with a Panda lower than level 10:
    /script print(UnitFactionGroup("player"))
    


    Another question: the Panda transition from level 9 to 10 (I think so) requires a choice between Alliance and Horde. I don't know exactly, but I think level 10 must be the magic barrier, because you can enter a battleground with level 10 (and battleground factions are either Alliance or Horde). Does anybody know if there is a new event that indicates that transition or (and this would be the easier way for blizz and addon authors) is it so that PLAYER_LEVEL_UP (to level 10) fires _AFTER_ that Panda Alliance/Horde choice? (and so it's secure to check the arg from PLAYER_LEVEL_UP for value 10 and than do some stuff)

    Thanks.
    Posted in: Lua Code Discussion
  • 0

    posted a message on LoadURLIndex and CONFIRM_LAUNCH_URL ???
    working example of addon code which can cause an actual problem:
    LoadURLIndex(0)
    


    Okay, because no one is interested in all that destructive hack fuss, let's talk about some positive applications. Let's start doing some real-time one-way meta-addon. The combination of Screenshot() and LoadURLIndex(0) can be used to transport ingame information in real-time (black background - white text - Screenshot() - start some ocr prg with LoadURLIndex(0) [yes this requires a modified default browser key] - do something with that data). ... This offers unimaginable opportunities.
    Posted in: Lua Code Discussion
  • 0

    posted a message on LoadURLIndex and CONFIRM_LAUNCH_URL ???
    The point is: With LoadURLIndex() it's possible to compromise (hack/steal) a WoW account with one simple thing: an addon.

    Some addons, even here at wowace.com comes with executables (mainly *.bat files). It's easy with a batch file to change the registry key that defines the default browser. On windows systems this is the key HKEY_CLASSES_ROOT\[protocol]\shell\open\command ([protocol] = http, https, ftp or so). Most WoW players use some Windows OS. To make such changes with a batch file you normally need special rights. The experienced user will never run such file, but I do not talk about experienced users, I am focused on the average user. The average user simply downloads something and runs something to achieve something. Simply cover such actions behind a wall of well-written, well-formed grammar, add some nice screenshots and garnished it with a little kitten or a brutal warrior and...bingo - (or worse: use your wowace-established author name to make a little update on an existing addon that use a batch file, manipulate it and pretend that you just made a superduper update...your credibility is gone but you can harm people...open repositories...even one victim is more than enough...) This kind of users are the main target for any acc hacker. Such users have simply a lack of knowledge and therefor such users may run such batch file, even if they are forced to run it with privileged rights. Pretend to explain why they must run this batch file... You think this can/does not happen? Wake up.

    Can you follow? If you can bring a user to run such batch file, this user is doomed. If this user runs WoW the addon calls LoadURLIndex(0) and the default browser is no longer a browser, it's some other code/prog/whatever [imagination on]. Because LoadURLIndex(0) does not require a confirm dialog the user has no chance to avoid the execution of potential compromised code/progs/...

    Sure, this will not work with any user. Sure, you need some imagination, but 1% is enough, even 1 is enough!!!

    If user/account security has any priority for Blizzard they must disable LoadURLIndex(). The absolute minimum is to disable it for addons and a confirm dialog.
    Posted in: Lua Code Discussion
  • 0

    posted a message on LoadURLIndex and CONFIRM_LAUNCH_URL ???
    Thanks Dridzt. This is interesting.

    LoadURLIndex() exists since Patch 4.2.0 (June 2011).

    syntax:
    LoadURLIndex(index)
    index must be a number otherwise this produce an error

    I did not find a way to open a custom website. All LoadURLIndex calls open a webpage from Blizzard.
    And Blizzard is well-advised to never change this.

    But I think the current behaviour is dangerous, very dangerous.
    An addon can simply add LoadURLIndex(0) to the first line of an addon and the default webbrowser opens with a battle.net address. No check or confirm is required for that action. Blizzard should immediatly hotfix this behaviour.
    Sure, it's only the browser and it's only a Blizzard website, but it's very dangerous in terms of security.

    I think it's plain stupid to allow WoW execute an executable (eg: firefox.exe) from within WoW with a single line of code in an addon. Damned plain stupid!!!
    Who is checking the integrity of this file? Warden? ...

    Blizzard should simply delete LoadURLIndex(). now. hotfix now!


    Thanks, Dridzt for bringing this up.
    Posted in: Lua Code Discussion
  • 0

    posted a message on AllYouCanEat
    No, no hard-coded list. The list is generated by the scan with data from the WoW server.
    I know that there are some items missing in that list, but I will not add the possibility to manually add items, because such functionality can produce sync problems.
    I think it's better to ask Blizzard to add the missing items to the server side database table(s).
    Posted in: General AddOns
  • 0

    posted a message on BattlegroundTargets
    The problem is that GetAreaSpiritHealerTime() only returns a value greater than 0 if the player is dead (if UnitIsGhost("player") is true) and is near a SpiritHealer.
    This means GetAreaSpiritHealerTime() is useless unless you transmit that information via SendAddonMessage() to other players.
    This also means that you only get valid informations if a groupmember is dead and is using this addon.

    GetAreaSpiritHealerTime() can give data from your group only, not from the enemy group. Even if GetAreaSpiritHealerTime() is synchronized between alliance/horde it would be impossible to determine if an enemy has release ghost or not, if an enemy stands near a SpiritHealer or not, and so on....
    This is a feature for a (Friend) Unit Frame addon, that shows exactly when your groupmembers ghost is released, not a feature for BattlegroundTargets.
    Posted in: General AddOns
  • 0

    posted a message on BattlegroundTargets
    Thanks for reporting. Should be fixed in latest alpha. http://www.wowace.com/addons/battlegroundtargets/files/
    Posted in: General AddOns
  • 0

    posted a message on BattlegroundTargets
    @bursonb: Try the latest alpha: http://www.wowace.com/addons/battlegroundtargets/files/. I have changed the layout and summary settings.


    The localization files (BattlegroundTargets-localization-xxXX.lua) needs some update: (3 new strings: "Layout", "Summary", "Show Guild Groups")
    - reply here (warning: the post preview is NOT the same as the submitted post), or
    - reply with a txt/zip attachement, or
    - use http://www.wowace.com/paste/ and post link, or
    - use the wowace.com svn repository directly.
    Thanks.
    Posted in: General AddOns
  • To post a comment, please or register a new account.