## Shadowss/TravianZ — 8.3.4…V11

_672+ commits._

### Features
- **Last Phase before v11 release. New Automation Cleanup** (8a2d727)
- **Add Cron Jobs for Automation** (6f80be1)
- **Add (Admin Panel) : Multi-account detection, Push protection, Heatmap, Gold Shop and Blacklist user names** (c7ba500)
- **Add MultiAccount Detection, Add Push Protection Detection, Add register Default Gold** (b87cf27)
- **Add Egipteans Detailed For Oasis Waterworks** (1925f45)
- **Add items for new tribes (temporary)** (0f4f575)
- **New Register Page With 3 Step Wizard** (ef52bdd)
- **Add translate for NEW TRIBE in romanian** (aa689cc)
- **Add image for new tribes in profile** (138ab1a)
- **Add 4 tribes for addUser Admin CP** (13d3244)
- **NEW TRIBES ENHANCEMENT (Huns, Egipteans, Spartans & Vikings) #327** (25c8925)
- **Add Hero T4 Item Description** (77a004d)
- **Add T4 Hero System (configurable on install)** (3c99623)
- **Add some translation file** (4bd3079)
- **Server Medal Reset Timer in NEW FUINCTION SYSTEM** (e9e5c0e)
- **Add credits** (f484bb0)
- **Change capital add index** (97d6b76)
- **New General Statistics** (66c966c)

### Fixes
- **Fix cron jobs and hero error** (62b39f4)
- **Fix Lang + Fix train troops in greatbarraks and great stable + fix ally message + refactor battle system** (da4f203)
- **Fix general in statistics** (0c9d2a6)
- **Fix Command Center Capital Change #329** (3d4d5e5)
- **Didiboo patch fr1.2 (#335)** (47f958c)
- **Fix hero T4** (7b2af2c)
- **Fix (ACP) Quest & Other** (96ab919)
- **Fix (quest_core.tpl) unit we finish ACP edit future** (24ce9a0)
- **Fix quest 33 add command center** (37e845a)
- **fix config** (ae6defa)
- **Fix edit new function for new tribes** (7fdad59)
- **Fix level 1 main building conquest** (4407fdd)
- **Fix Huns Command Center Conquest + Fix hero on Huns attack lost + Add NEW TRIBE HERO ITEMS** (28c0bb5)
- **FIX WALL NAMES FOR QUEST NEW TRIBE** (47a7403)
- **Fix Settler Quest for NEW TRIBE** (b34bb62)
- **Fix 3 bugs (spy dont die, hero error battle report and hospital cost)** (089d1df)
- **Fix CSS TOP 10** (585fe3a)
- **Fix cage and animal release for hero T4** (60a2d3b)
- **Fix T4 hero Adventure & Auction by tribe** (72af9eb)
- **Fix Milestone 1000 pop (invalidate cache for count pop)** (d8ff747)
- **Fix (vulnerability) HTTP_HOST** (8eeee03)
- **Fix (vulnerability) Stored Cross-Site Scripting (XSS) in Admin Mass Message Tool** (375422c)
- **Fix Open Redirect via Unvalidated HTTP_REFERER Header in Admin Panel After Login and Admin Actions** (cba3ce8)
- **Fix forgotten password vulnerability** (5f005e1)
- **Fix WW in statistics** (b24033f)
- **Fix translate in statistiks translate** (26ed89b)
- **fix(farmlist): recalculate distance when editing a raid-list target [#319] (#325)** (1eb85f3)
- **fix(admin): read config template from the version-controlled copy [#322] (#324)** (d791958)
- **fix(combat): match building type by 't' suffix in Battle::getTypeLevel [#294] (#323)** (eee3d6f)
- **Fix milestone onmouseover and add 8th milestone** (40e5942)
- **fix(combat): gate Brewery attack bonus on an active Mead-Festival [#294] (#321)** (06d1523)
- **Fix issue #320** (3af041d)
- **Fix edit user** (07d942d)
- **fix struct, forgot an ,** (e661859)
- **fix(troops): apply Tournament Square bonus only beyond the threshold [#304] (#317)** (12badfa)
- **Fix login #312** (f7594e3)
- **Fix admin log addVillage** (2fc3572)
- **fix(combat): bounce attacks home when a multi-wave razes their target [#298] (#311)** (58475a0)
- **Fix T4 Pack** (61d0868)
- **fix(combat): bounce attacks home when their target village no longer exists [#298] (#310)** (ffa04ca)
- **fix(combat): stop attacks looping on a village razed earlier in the same tick [#298] (#309)** (f849260)
- **fix(spawn): stop WW/artifact villages colliding on axis tiles [#301] (#308)** (299e3c7)
- **Fix #302** (e1847bc)
- **Some fix in admin panel** (beb9606)
- **fix(admin): render a proper error page instead of a blank page on denial [#299] (#307)** (8c1a6ad)
- **Fix #305** (7504045)
- **Fix img natar** (ba07c83)
- **Fix bug #303** (9f98acf)
- **Temporary fix #293** (c6d6582)
- **Fix #294 code for brewery** (a998edc)
- **Fix #291** (b4e54c6)
- **Fix #292 gold club addraid/edit raid** (757e0fc)
- **Fix #296** (bd9a1f8)
- **Fix Statistiken & Credits** (e1dd434)
- **fix hero regen** (4561a84)
- **Fix visualisation in report** (0dea106)
- **Fix warsim security issue & hero building** (21d50a1)
- **Fix Some PHP 8+ view error in Build & Credits** (fe6ff01)
- **Fix critic bug typo critic: $refValule** (23708a2)
- **fix(market): reject resource sends above the warehouse stock (#277)** (e13586a)
- **fix(rally-point): show incoming hero column for attacks [#267] (#274)** (e432eee)
- **fix(profile): store profile descriptions raw to stop double-escaping (#273)** (d0479a5)
- **fix(admin): escape stored player values in admin templates [#139] (#272)** (c0bbf2b)
- **fix(admin): escape reflected filter param in report/msg templates [#139] (#271)** (90c5cdd)
- **fix(admin): escape reflected request params in admin templates [#139] (#270)** (749a55a)
- **fix(admin): verify CSRF token in maintenance admin Mods [#139] (#269)** (e17bb3d)
- **fix(admin): verify CSRF token in server-settings admin Mods [#139] (#268)** (886f421)
- **Fix Server Settings in Admin Panel** (31b1387)
- **fix(admin): verify CSRF token in message admin Mods [#139] (#264)** (6472b30)
- **fix(admin): repair broken admin-log variables in medals Mod (#262)** (fb225b5)
- **fix(admin): verify CSRF token in alliance/medal admin Mods [#139] (#261)** (8a3a67d)
- **fix(admin): route alliance management pages [#139] (#260)** (e4658f2)
- **fix(admin): verify CSRF token in village admin Mods [#139] (#259)** (ca99140)
- **Fix ban view** (113e902)
- **Fix map view in Admin Panel** (b587e26)
- **fix(admin): verify CSRF token in troop admin Mods [#139] (#258)** (8d1a1ca)
- **fix(admin): route password/protection pages and align username validation (#257)** (b880622)
- **fix(admin): verify CSRF token in player-management admin Mods [#139] (#256)** (e49069a)
- **fix(admin): let editPlus subtract Plus/bonus days as the form advertises (#254)** (6888a09)
- **fix(admin): verify CSRF token in Plus/Gold admin Mods [#139] (#253)** (6e79c47)
- **fix(profile): neutralize stored XSS in profile descriptions [#250] (#252)** (9d2d769)
- **Fix some things** (4b208db)
- **Fix also in admin panel removexss** (b9d36ba)
- **Fix #250** (c250a19)
- **Fix fLevel** (561933b)
- **Some fix** (41e0fd6)
- **Fix Admin Panel view & some PHP 8.1+** (337c94b)
- **fix(reports): pass aid on vilview report links so ally reports open [#246] (#247)** (afbba3f)

### Backend
- **Some full fixes before final v11 release** (9a3f26b)
- **Refactor GameEngine files** (8db3032)
- **Refactor Village.php #326** (94a7a1c)
- **Major refactor: Extract Database and Automation into domain-specific trait files** (d89ffe4)
- **Pictures Vikings (Manual) (#334)** (2264a6b)
- **Account.php (#333)** (6b0ef8a)
- **Update fr.php (#331)** (1573b5a)
- **Create SECURITY.md for security policy** (ed325b6)
- **Restore commit** (c57122b)
- **Remove Monsters from acp** (575a0f9)
- **Remove monster units** (367421f)
- **Remove Monsters** (bb6cdd2)
- **Email Header Injection in Invite Feature via Unsanitized POST Parameters** (3c401e4)
- **Update credits** (6e94898)
- **Milestones Translate** (c502394)
- **Milestone added in separate TAB in Statistics** (99edc74)
- **General Some Only for MH/ADMIN** (01f1965)
- **Added Milestone On Install** (0edb952)
- **Remove unused code** (cc3ed8d)
- **Close php ?>** (c62fbc3)
- **Forgot to upload festival.php** (75b9bc5)
- **Merge branch 'master' of https://github.com/Shadowss/TravianZ** (b213630)
- **Added case for Players attackers** (5d6562f)
- **File sysmsg remove** (0991c5c)
- **Compact checkvacation function** (8f204ec)
- **Update version & hall of fame** (c37e8b2)
- **Added some graphics TravianZ** (13d54b7)
- **Set white font to view name** (c98bcf2)
- **Update some files & remove unused code** (8d492be)
- **Merge branch 'master' of https://github.com/Shadowss/TravianZ** (5f86fdc)
- **Added TravianZ Logo** (a9be620)
- **feature(rally-point): bold the "?" for incoming stacks below rally point level [#249] (#251)** (228397d)
- **feature(rally-point): mark incoming attacks + show per-troop travel time [#245] (#248)** (f581add)
- **Update README.md** (e43dfdd)

### Chore
- **Refactor(Technology): de-duplicate unit-summing and tidy getUpkeep() [#219] (#289)** (fa1057d)
- **Refactor(Technology): split trainUnit() into focused helpers [#219] (#288)** (0e13ae2)
- **Refactor(Technology): make getTrainingList() table-driven [#219] (#287)** (082ad85)
- **Refactor(Units): extract resolveCatapultTargets() from sendTroops() [#219] (#284)** (596f007)
- **Refactor(Units): split checkErrors() into focused validators [#219] (#283)** (58469ea)
- **Refactor(Units): extract buildHeroStats() to de-duplicate Hero() [#219] (#282)** (db3953d)
- **Refactor(Units): collapse the duplicated procUnits() cases 1-4 [#219] (#281)** (1e661b7)
- **Refactor(Technology): merge upgradeSword/upgradeArmour into upgradeWeaponOrArmour() [#219] (#280)** (06089df)
- **Refactor(Automation): TO-DO list items 7-9 [#266] (#278)** (49ce36f)
- **Refactor(Automation): clean up the Automation.php TO-DO list [#266] (#276)** (045f72a)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/Shadowss/TravianZ?utm_source=github-action)._