Every Single NES/FDS Game

**Incubator** · 04-08-2012, 06:09 PM

I started working on a list a for a while now, which is stored in a database, and generated out with PHP. It's still not finished, but i thought to upload it, to see what you guys think.

Every game has the following info: title, aka, description, 2 screenshots (title screen, in-game), year (release), type (genre) and 2 buttons, one to mark as mastered and the other one to mark if it's on ru or not.

The list also features a powerful search, where you need to input the 'where' part from a mysql query.

At the moment there are 1302 games, from which 937 are on the site.

I hope, that the list can help in organizing the nes games and add more in a clean way, without adding duplicates or cheap sprite hacks.
The list is also useful for finding new games to play, or searching for games without knowing it's title.

server2go.zip

---------- Post added at 06:09 PM ---------- Previous post was at 04:40 PM ----------

html version, which is only 17,5mb

**Slime Slayer** · 04-08-2012, 06:50 PM

Cool good work. You realise you got a bunch of games that are recent listed?

**Incubator** · 04-08-2012, 07:27 PM

Quote:

Originally Posted by stevencassidy13

Cool good work. You realise you got a bunch of games that are recent listed?

what do you mean, by that?

**Slime Slayer** · 04-08-2012, 07:52 PM

There are some games that are homebrew that are as new as 2012 listed.

**Incubator** · 04-08-2012, 08:43 PM

Quote:

Originally Posted by stevencassidy13

There are some games that are homebrew that are as new as 2012 listed.

yes, i know, that's the point, to add all of them...
Try using commas, the sentences will make more sense to anyone who reads it

**Slime Slayer** · 04-08-2012, 08:52 PM

Oh ok, I'm just not sure if they qaulify for R.U. or not.

**CrispyChicken** · 04-08-2012, 11:34 PM

Quote:

Originally Posted by Incubator

Try using commas, the sentences will make more sense to anyone who reads it

How would that help in that sentence at all? lol

**Incubator** · 07-13-2012, 02:31 PM

After all that time, the list is pretty much complete.
There's a total of 1869 games, from what 1039 are on the site, excluding duplicates and very similar hacks.

The goal of the list was to discover rare gems, and put them in a list with previews to easily recognize/view them. It's true that there are lots of games that are unworthy of tryout, but in the same time i discovered many great games.

The list is pretty unique, there shouldn't be too many duplicate inside the list, let me know if you fnd any game that or listed twice under different releases...

Download (27 MB)
I recommend using chrome, because it opens it 10x faster.

**fungusman** · 07-13-2012, 07:21 PM

Probably a better idea to release the .sql file. Chances are if you know how to launch that stuff you have your own server/servers anyway.

export the db

Code:

mysqldump -u"username" -p"password" databaseName > dbcopy.sql

then import

Code:

mysql -u"username" -p"password" databaseName < dbcopy.sql

Also, use XAMPP instead ; )

**Incubator** · 07-14-2012, 12:26 AM

Quote:

Originally Posted by fungusman

Probably a better idea to release the .sql file. Chances are if you know how to launch that stuff you have your own server/servers anyway.

export the db

Code:

mysqldump -u"username" -p"password" databaseName > dbcopy.sql

then import

Code:

mysql -u"username" -p"password" databaseName < dbcopy.sql

Alright, here are the php files and the sql database:
Download Source

Quote:

Also, use XAMPP instead ; )

What do you mean? I am using XAMPP :P

Also, let me know if some one knows a good site where are lots of details about most of these games, so i can make a script to grab all the data and inject it into the list.

**fungusman** · 07-14-2012, 04:26 PM

nice.

Do you want me to throw this on some webspace for you ?

**Incubator** · 07-14-2012, 06:13 PM

Quote:

Originally Posted by fungusman

nice.

Do you want me to throw this on some webspace for you ?

You can put it up if you want, but it wasn't meant for that, as there's a textfield on the index page where everyone's able to inject mysql code, therefore anyone can do what they want with the database.
And it might also be slow...

**fungusman** · 07-14-2012, 06:40 PM

lol

Code:

mysql_real_eascape_string($text);

Theres also these things called passwords, pretty cool at keeping people out of places you don't want them in

Also, no website is hack proof believe me. That's a badge you must earn.

**Incubator** · 07-15-2012, 02:26 AM

Quote:

Originally Posted by fungusman

lol

Code:

mysql_real_eascape_string($text);

Theres also these things called passwords, pretty cool at keeping people out of places you don't want them in

Also, no website is hack proof believe me. That's a badge you must earn.

:P mysql_real_escape_string() is not the solution, as it was planned to be able to add mysql code inside it, for advanced searching, i didn't want to spend time on making it safe for publishing, i wanted to make it fast and advanced, so i just made it possible to insert mysql code in it. Also, passwords wouldn't be the real solution, because people can do things by mistake as well.

The best solution would be to secure the search and create registration.login, where everyone would have a copy of the list, and could add remove, edit what they want without messing up the original, but for that i don't have the time now.

But you can also upload only the html version.

**fungusman** · 07-15-2012, 04:15 AM

mysql_escape_string escapes sql injection.

**Kong** · 07-15-2012, 07:51 AM

mysql_escape_string will secure the code but it will also break it.

Example, to search for Mario you wouldn't type mario, you would type
SELECT * FROM games WHERE title LIKE "%Mario%"

If you escaped that then it wouldn't search for anything.

**fungusman** · 07-15-2012, 01:30 PM

Code:

$text = mysql_real_escape_string($_POST["mario"]);
$sql = "SELECT * FROM games WHERE title LIKE '%".$text."%'";

**Kong** · 07-15-2012, 01:55 PM

He designed it for personal use and it to take any sql.

Example the search could also be
UPDATE gamelist SET beat = 1
or
SELECT * FROM gamelist WHERE beat = 1

It is fixable, just you can't slap mysql_real_escape_string on it and be done is the only point.

**fungusman** · 07-15-2012, 02:11 PM

Ah ok, so he has a field somewhere that takes raw sql queries gotcha.

**Kong** · 07-15-2012, 04:04 PM

Right. Because he wanted to do more than just search and was planning on being the only user.

**Incubator** · 07-16-2012, 07:55 AM

^ that's all true
but you can find the table data in the sql file and use the search bar by putting in for ex.

title LIKE '%Mario%'
(which would find all games with mario)

released > 1990
(which would find all games released from 1991)

on_ru = 0
(games that aren't on ru)

this is what you have to insert to make basic searches, only the part after the WHERE, as it is written before the textfield

I designed this way, because i wanted to create a very powerful search function as fast as possible while ignoring security, so this seemed a good solution.
I know this isn't a normal solution for public usage, but if requests come up, i will take my time to make it safe for public usage