Users or teams can join ladders and challenge other players or teams in the ladder. Elo rating system is used which calculates the difficultly of a match according to the players' ranks and this is taken into account when the ranks are updated after the match is finished.
Feature List:
General Features
All pages are XHTML valid
Tournament Features
Hall of Fame (Top 10 Tournament Players)
Permissions can be set per usergroup
(AdminCP -> Usergroups -> Usergroup Manager -> {Select Usergroup} -> Tournament Permissions)
Tournaments start automatically when no slots are left
Tournaments have proper Date/ Time converted to users timezone and DST
3 Tournament Modes: Last Man Standing, Single Elimination, Double Elimination and Round Robin
Filter Tournaments Displayed according to Tournament Status
Tournament User Stats Page
'Start Tournament' for Single Elimination adds bye players and creates brackets
Tournament options
Turn on/off tournament
Create Thread on Tournament Creation
Require check-in before tournaments
Tournament Stats in Member Profile
Tournament Stats in Postbit (Can be turned on/off in Tournament Options)
Comments per page
Tournament description length shown in tournament List
Tournament Display
LMS realtime ranking shows if players are equal positions
Tournament View Counter
Tournament creator and last edited by notes at bottom of tournament
Hey! Heads up, I think I found a potential exploit that would allow for SQL Injection with the username. We encountered this error with a member who likes to use apostrophe's in their username:
Quote:
Invalid SQL:
SELECT COUNT(*) AS countrows FROM tmnt_ladder_players WHERE lid='1' AND (userid='4043' OR username='.:'Xari') AND active=1;
MySQL Error : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'Xari') AND active=1' at line 1
Luckily the user's name wasn't " justanothermember'; DROP TABLE users; -- " or similar.
Is there any way to sanitize the username input without breaking the entire mod?
Hey! Heads up, I think I found a potential exploit that would allow for SQL Injection with the username. We encountered this error with a member who likes to use apostrophe's in their username:
Luckily the user's name wasn't " justanothermember'; DROP TABLE users; -- " or similar.
Is there any way to sanitize the username input without breaking the entire mod?
Fixed in v4.4.0 (attached in first post).
If you still encounter this mysql error, can you pm/email me the page which is causing it, thanks.
Hi, I'm currently using this mod on vb 4.1.3 and am trying to get the custom profile field on the bracket to work.
I changed the setting in the vB Options section to allow custom profile fields in tournament brackets. I then input "{vb:raw userinfo.field5}" into the tmnt_bracket template but it doesn't show up on new tournaments or previous tournaments.
Am I doing something wrong or is there a bug I'm not aware of?
I'm shockingly bad at coding, using firebug to implement images underneath the rounds, this is a request to have an option to insert different maps/images at different rounds when creating tournaments.
Is this possible?
Keep up the good work
v4.4.1+ (to be released...)
Create vBulletin Hook in AdminCP with hook location tll_tmnt_view_post_query and the following php code
Hi, I'm currently using this mod on vb 4.1.3 and am trying to get the custom profile field on the bracket to work.
I changed the setting in the vB Options section to allow custom profile fields in tournament brackets. I then input "{vb:raw userinfo.field5}" into the tmnt_bracket template but it doesn't show up on new tournaments or previous tournaments.
Am I doing something wrong or is there a bug I'm not aware of?
It will only affect Single Elimination tournaments and 4 player/team double elimination tournaments.
I've tested it and it works for me...
Whereabouts are you putting it in tmnt_bracket? - I would suggest around the line: