Talk:URL hacks

does Ruin = ?ruin

Is the ruin the same as the ransack? 'arm. 01:30, 17 August 2007 (BST)

Good Question- I actually forgot to look when I did a bunch on the 14th, and now its hard to score on easy!  Swiers 02:15, 17 August 2007 (BST)

No, ruin is ?ransack. Only button text is changed --~~~~ [talk] 16:54, 14 December 2007 (UTC)

That makes sense; its the simplest way to handle things, and goives the most predictable results. For example, if 6+ players all submit a ?ransack at the same time, the building logically should be ruined. Having them be the same action call makes that simple; if there was a seperate action call (eg, ?ruin) it would require special exception handling, etc.  Swiers 20:17, 16 December 2007 (UTC)

Spend AP

Does this spend AP like usual? BoboTalkClown 21:04, 27 September 2007 (BST)

Yes. In fact, it IS the usual way of doing things, in terms of how the server sees things.  Swiers 00:02, 28 September 2007 (BST)

To Do

• Figure out how zombies destroy building decorations, and then figure out if they can do it when survivors are present by using url-crafting.
• See how Zombie talking (with and without Death Rattle) works
• I can't work out how speaking can be used for survivors
• Check if fixing ransacks (not ruins) uses ?repair
• See how Flailing Gesture works (also for Target Codes)
• I can't work out how Binoculars work (also for Target Codes)
• I can't work out how targeted item URL works (such as Stale Candy, FAKs, Syringes and DNA Extractors)
• Check if ruin is uses ?ransack
• See how Phones can be used to avoid an AP and an IP hit when checking messages
• Check if ?phone or ?phoneUDID can be used to avoid an AP

--xensyria^T 05:34, 14 December 2007 (UTC)

binoculars:

<form action="map.cgi?use-F" method="post" class="a"><input type="submit" value="binoculars" class="m"> looking <select name="d">
 <option value="n">north<option value="ne">north-east<option value="e">east<option value="se">south-east
 <option value="s">south<option value="sw">south-west<option value="w">west<option value="nw">north-west</select></form>

or speaking english - the same way as other drop-downs (FAK, DNA Ex etc.) with targets n,ne,e,se,s,sw,w,nw --~~~~ [talk] 17:08, 14 December 2007 (UTC)

Yea - but do you know how this converts to a URL - I've tried loads of combos without it working for me --xensyria^T 17:23, 14 December 2007 (UTC)

?phone doesn't work, but ?phoneUDID saves an AP and IP hit from clicking on the phone item button I still don't yet know about checking messages - if anyone want to send me a couple of messages (better to check more than one at a time first) then this would be sped up... --xensyria^T 17:23, 14 December 2007 (UTC)

the way things are "converted" in URL is using the GET method of http. for example map.cgi?v=xx-yy is actually calling "map.cgi" script with parametre v set to 'xx-yy'. in UD html the method used is POST, but in generally it doesn't matter how the parameter will arrive. Now comboboxes. Binoculars one (for example) is calling script "map.cgi?use-F" and pass througgh POST parameter "d" set to (for example) 'ne'. You want to pass the parameter with GET instead of POST? (i.e. make an URL) then you would need to write something like "map.cgi?use-F?d=ne", but that obviosly won't work. Neither will "map.cgi?use-F&d=ne". I think it's impossible to make it with GET here... --~~~~ [talk] 17:40, 14 December 2007 (UTC)

Ok - cool - thanks! I'd figured out about the get and post stuff, but I wasn't 100% sure on if two?s could be used in this method - although the examples (including the ones that you listed) didn't work for me. Why I can't get 'speech' to work though when I can get 'sms' 'graffiti' and 'broadcast' to work though is beyond me. Also, I think that maybe a list of commands that can't be used in URLs (or are limited, like those that use strings) should be added, maybe the article moved ( ;D ) to something less messy like 'Actions via URLs'. Sorry for the edit conflicts though - not the first ones today - I'll wait for a bit --xensyria^T 18:03, 14 December 2007 (UTC)

I don't know why ?speech doesn't work. hm... --~~~~ [talk] 18:21, 14 December 2007 (UTC)

Well, it seems that phones can be checked without using an AP, so it doesn't save an AP... Also, I removed the items with targets from the to do list as I added them to the impossible actions in the main page, and flailing gesture has been done --xensyria^T 15:18, 17 December 2007 (UTC)

• A new to-do Figure out how zombies destroy building decorations, and then figure out if they can do it when survivors are present by using url-crafting.  Swiers 18:09, 14 December 2007 (UTC)

This may be done automatically by ransacking - but I don't play as a zed so I don't know --xensyria^T 15:18, 17 December 2007 (UTC)

Actually no. When there's no survivors present - you get additional button "Smash decorations", pressing which removes last one from the list. you can ransack/ruin without touching decorations. --~~~~ [talk] 21:07, 17 December 2007 (UTC)

Gesture

First of all, i'm very pleased that there is a message for case when wrong parameter is passed. Now some fun: "a zombie" gesturing target (a random zombie, you don't reveal UDID by gesturing) in a case when you're the only one in a building is not in a list, but entering it through url does perform "You gesture at a random zombie". You're gesturing at yourself i guess...

Second, gesturing at UDID if you enter your own ID is also possible

Third: Zombies cannot use GPS, but looking onto html code of the gesture combobox one can clearly see the coorditates...

Forth: i think there might be other targets in some situations (generator, transmitter, "survivors" as a whole maybe)

--~~~~ [talk] 17:52, 14 December 2007 (UTC)

Great! I'll add a few things once all the editing here's calmed down a bit - do you mind if I make your additions a bit more uniform with the others? That random gesture is an awesome find! The location co-ordinates can always be found in the map buttons in the source HTML too :). I was wondering about the other targets as your were saying - 'survivors' seems a bit unlikely, but possible, and the genny radio and christmas decors are all likely in my opinion. Maybe other museum decorations can be as well. Finally, do you want to add these codes to the Target Codes page (indicating what they're used for etc. etc.) if you're not doing so/have done so already ;) --xensyria^T 18:03, 14 December 2007 (UTC)

Good stuff. All the recent edits to this page rock! I'd bet the "targets" of gestures are the same as for attacks, so you surely can gesture at generators and transmitters (I recall seeing them as options) but I'm not sure about survivors as a crowd; there seems no mechanic anywhere in the game code for treating survivors as non-individuals.
As for the GPS thing, that's not really unique to flailing gesture; the HTML code for the mini-map includes co-ordinates for all the surrounding squares (but oddly, not the one you occupy), which is how Iwitness and some other tools figure out your location.  Swiers 18:07, 14 December 2007 (UTC)

Eh... yes i was doing so. Also i've checked - there are indeed 'b' for barricades, and i recall there always was an option for genny and radio if they're present and assume there will for christmas decorations too all according to target codes. As for "survivors" - my sick memory recalls something like "you gesture at other zombies" and "you gesture at survivors". Not sure if such option ever existed really. Oh and i forgot that coordiantates are spoiled for movement. >_< In Ravenblack movement is compass-direction... --~~~~ [talk] 18:13, 14 December 2007 (UTC)

The gesture at survivors is indeed present. --~~~~ [talk] 09:43, 16 December 2007 (UTC)

I'm forgeting to write this, but gestures "dh" and "dz" can be performed by url even if conditions of 50+ human/zombies is not met. well, at least i recieve messages that i perfom such gesures, not sure if other players see them... --~~~~ [talk] 15:17, 23 March 2008 (UTC)

IRC

Ok, due to edit conflicts here, and to help communication, I think that it's best if we use IRC to chat about this stuff as we edit it. Duke Garland and myself are online on the irc.nexuswar.com #udwiki channel now - so if you're still online Swiers then please come along as well! --xensyria^T 18:48, 14 December 2007 (UTC)

Linkee to the IRC room.--Karek^maps?! 12:08, 16 December 2007 (UTC)

parsing plain text over http

I've striken out problems with "not being able to broadcast/graffiti/etc any character, for example spaces". You can, they just need to be wrapped to be put into URL. for example to broadcast "2 z" you need to do ?broadcast=2%20z --~~~~ [talk] 16:17, 21 December 2007 (UTC)

I tried that before I put it up, without success - did you manage to get it to work? Also, there's a 150 character limit to GET in URLs - so that may be a limit for speech if it ever worked...--xensyria^T 18:19, 21 December 2007 (UTC)

Didn't/don't know about 150 limit. Yes, i broacasted "2 2" on... i think it was 26.80, not sure... before posting this --~~~~ [talk] 19:06, 21 December 2007 (UTC)

Sounds like its basically just an issue of chracter escapement, IE, making sure that all the characters in your hand-written URL are ones that can be sent in a URL, and using the special equaivalents for ones that can not. In that case, this may be a useful link to include; if you go to the bottom, there is an automated convert-o-bot.  Swiers 21:36, 21 December 2007 (UTC)

Zombie talking w/o Death Rattle

<form action="map.cgi" method="post" class="a"><select name="speech"> <option value="zs1"> Graagh. <option value="zs2"> Graaaagh! <option value="zs3"> Grrrh. <option value="zs4"> Grh. <option value="zs5"> Mrh? <option value="zs6"> Brnhr. </select><input type="submit" class="m" value="Speak"></form>

It's supposed to work as ?speech=zs2 but weird enough it doesn't work this way. I'm pretty sure it's also "?speech" for zombies with death rattle. I also have concerns that it doesn't work in any of the cases because there is some system that analyses who is speaking and what. For example ?speech=zs2 for survivor would make You Say "zs2", for zombie w/o death rattle You say "Graaaagh!", for zombie with death rattle You say "Z" --~~~~ [talk] 11:10, 22 December 2007 (UTC)

skill buying - abuse, now fixed

I recommend everyone to pay attention at this and the fact that this stuff atracted Kevan's attention --~~~~ [talk] 11:15, 10 January 2008 (UTC)

Not exactly the same thing considering that is about a link that pretty much screwed anyone who clicked it.--Karek^maps?! 13:20, 10 January 2008 (UTC)

I think Duke's refering to his request that Kevan review them all, and put a block on use of non-standard actions in general, or at least ones that allow action types that the normal interface does not not allow for the character, or at least the character's mortal status.
Its worth noting that this would hardly be the first time Kevan was made aware of the game's potential for zombie gun use.  Swiers 15:52, 10 January 2008 (UTC)

Just noticed that ?gesture is no longer working for survivor --~~~~ [talk] 20:54, 21 January 2008 (UTC)

more changes

?reallyjump changed - it's now not your UDID, but random 4 digits. someone doubted that by mentioned above comment i attracted K's attention?.. ;) --~~~~ [talk] 17:33, 23 January 2008 (UTC)

Way to be full of yourself. Maybe someone emailed him ways in which links like that are still abusable. It still doesn't make you correct about the above comments, it just means that he is, again, working against dangerous links like that, ?barricade, and the brain rot one, links with which one group of players screwed another group horribly. --Karek^maps?! 17:38, 23 January 2008 (UTC)

What's up with sence of humour? I put that smiliey there specially for you. --~~~~ [talk] 17:45, 23 January 2008 (UTC)

I'm in a bad mood today because people are acting like this update matters. Just like they did with ruin.--Karek^maps?! 17:48, 23 January 2008 (UTC)

Updates are updates. *shrugs* --~~~~ [talk] 17:52, 23 January 2008 (UTC)

I don't see the logic behind that one. ?reallyjump wasn't abusable, that I can figure out. I tried it on my own characters.  Swiers 18:02, 23 January 2008 (UTC)

i feel like it's part of bigger revamp of POST-ing data to server... --~~~~ [talk] 18:08, 23 January 2008 (UTC)

Could be. The random number thing is more of a "only from this one screen instance" thing, which I guess blocks most uses of get type data submission, as well as other systems that can create post-type data submissions. But he already had that in place for barricades; why put it in an obscure spot like "?reallyjump" ?  Swiers 18:19, 23 January 2008 (UTC)

?smash when there are survivors

You are too distracted to smash decorations while survivors are defending the building.

Junkyards

... cannot be ransacked/ruined, but if try to call according url?

You smash at the piles of wreckage, to no effect.

--~~~~ [talk] 14:51, 23 March 2008 (UTC)

...city zoo enclosures are same as junkyards. you cannot ransack them. But if try to call url?

You throw some rotten straw around.

tried in the Aquarium, the Giraffe House, the Bear Pit and the Lion Enclosure. --~~~~ [talk] 09:59, 29 March 2008 (UTC)

Interesting. Its worth noting that Kevan doesn;t put these in to amuse hackers looking for easter eggs; there are "normal" circumstances where you might trigger this. One case would be if you had an old game screen from one character open (in this case a zombie inside a building they could ransack / ruin) but were logged into another character, and then clicked ransack on the old screen.  Swiers 17:27, 29 March 2008 (UTC)

Movement in Monroeville

I can't get http://www.urbandead.com/map.cgi?v=xx-yy to work in Monroeville. I am sitting at the SE corner (in zombie form) without Lurching Gait. I tried moving anywhere with it, but I don't go anywhere. I was hoping to abuse that to move into the blank space at the quarantine's edge, especially since I'm seeing some survivors and zombies appearing there. There is a group of spaces where the buttons would be, but so far, I haven't found any way to exploit that, ot even move with the URL command anywhere. Could I get a little help, here? I did take into effect Monroeville being 98x98 already. Thanks.--Kolechovski 20:03, 30 September 2008 (BST)

You're at a field [398,98] and are trying to use url /map.cgi?v=399-99 and it doesn't work, and neither do /map.cgi?v=399-98 and /map.cgi?v=398-99 ? How about /map.cgi?v=397-98, will it take you 1 bblock left? Well it only means Kevan does the coordinates check for the borders. About the "I'm seeing some survivors and zombies appearing there" - there's a bug in some of ud tools that causes that. don't remember which tool. --~~~~ [talk] 19:53, 3 October 2008 (BST)

Okay, I used the 3xx ones, and they work. For some reason, a GPS in Monroeville would just display like in Malton, without the "3" (2 digit coords). Unfortunately, Kevan indeed blocked off the edge. When trying to use any URLs that go beyond, I get "The surrounding area has been blocked off. You cannot leave the quarantine zone." I am still trying abuses, and I noticed something odd. If you specify a movement more than 1 space away, nothing happens. Well, I still wondered about the spaces beyond the border, so I entered "300-00", and it gave me the "blocked off" text, rather than nothing at all, so it seems a number wrap might still be available to abuse. Want to try to figure out how? I also got the "blocked off" text with 397-00, 300-97, 300-98, 300-99. I can kinda understand that space along the bottom and right sides to account for that extra block, but with there also being that space, I'm curious what coords to try with my alts along the left and north edges. Maybe something there will work. Maybe I should try one of those in one of the places lacking the razorwire text along the edge...--Kolechovski 20:02, 5 October 2008 (BST)

Some more coords with interesting effects. This time I'm in the SW corner of Monroeville. Listed will be results in the following format...

(Current XXX, Current YY)--(Attempted XXX, Attempted YY)--result (move, nothing, blocked-off text)

(302, 97)--(302, 00)--nothing

(302, 97)--(301, 00)--nothing

(302, 97)--(301, 97)--move

(301, 97)--(301, 00)--blocked

(301, 97)--(302, 00)--blocked

(301, 97)--(303, 00)--blocked

(301, 97)--(355, 00)--blocked

(301, 97)--(302, 98)--move

(302, 98)--(302, 99)--blocked

(302, 98)--(302, 00)--blocked

(302, 98)--(302, 01)--nothing

(302, 98)--(301, 99)--blocked

(302, 98)--(301, 00)--blocked

(302, 98)--(301, 01)--nothing

(302, 98)--(300, 01)--blocked

(302, 98)--(300, 00)--blocked

(302, 98)--(300, 45)--blocked

(302, 98)--(301, 99)--blocked

(302, 98)--(301, 98)--move

(301, 98)--(460, 99)--nothing

(301, 98)--(360, 99)--blocked

(301, 98)--(300, 99)--blocked

(301, 98)--(300, 00)--blocked

(301, 98)--(300, 01)--blocked

(301, 98)--(399, 01)--blocked

(301, 98)--(398, 01)--nothing

(301, 98)--(301, 01)--nothing

(301, 98)--(300, 50)--blocked

So, with all this, it seems that if one coordinate will put you at the edge, even if the other coordinate is invalid (but still falls somewhere on the map), it is ignored, and you automatically get the blocked text, even if the movement is excessively large. I'd still like to try the NW quadrant before throwing in the towel, but I'm afraid this may be one thing I won't get to break : ( Oh well, I tried.--Kolechovski 23:22, 20 October 2008 (BST)

April Fools

Not very useful, but ?aprilfool still gives the "You wake up. It is April 1st 2009, and the world is ending." message. --Midianian^{¦T¦DS¦SP¦} 08:32, 3 April 2009 (BST)

Interesting. Reckon it will stay permanently? D^ANCED^ANCER^EVOLUTION (TALK | CONTRIBS) 12:27, 3 April 2009 (BST)

I'm guessing it'll go away the next time he makes an update. --Midianian^{¦T¦DS¦SP¦} 12:45, 3 April 2009 (BST)

Hope it does, it kinda funny , but i guess it wont --Dans34^Talk _{Umbrella Corporation} 12:34, 3 April 2009 (BST)

And so it remained.-- Adward  23:38, 14 February 2010 (UTC)

Contact List

The color option information given is innaccurate. I was just testing it out and false does not switch to the ignore flag, instead 10 is used for this function. Also I think it would be useful to list what color each number represents for reference. I'll include the list for easy of addition.

0=default non-contact color and functionality

1=Grey

2=Red

3=Orange

4=Yellow

5=Green

6=Blue

7=Purple

8=Black

9=White

10=Ignore Contact

d= Delete Contact

I did not confirm that each and every one of those codes are accurate but i checked 1, 10, and 9 and those were accurate so i feel it is safe to assume the others are as well.

Also I think it would help others if the explanation regarding color codes was clarified a bit. It doesn't actually state that you replace the word color with the correct color and this can lead to some confusion(at least it did for me) --Sephikus ^T 07:00, 8 May 2010 (BST)

so...

1. Personal Radios can be retuned without using an IP hit and 1 AP clicking to retune them.
2. Radio Transmitters can be retuned without using an IP hit.
3. Jump can be used without confirmation, saving an IP hit. No longer works. A random number is now used in place of UDID.
4. Mobile Phones can be accessed without taking 1AP clicking on the item button.

That... seems like cheating when it works around game built constraints. Although they are minor actions, it still seems like cheating to me O.o--Mikalos209 22:10, 29 July 2010 (BST)