Not much to report right now, just thought I better post a blog before most of Legacy's players and half of my staff disappear for a couple of weeks in to Cataclysm. A Christmas release for the fight system is looking sketchy but hopefully I can get it up for testing for Christmas at least. It's going to take a lot of testing on Dev before it goes live.

I can't promise I'll get it up for Christmas as this month is very busy for me, but if I don't I'll remove the level cap Christmas day instead. Meaning players can level past level 80 if they wish, I'm sure you can find information on how this will work in my past blogs so I won't go over it again. We haven't hired a marketting staff member yet but you'll notice the player count is going up now on account of some changes I've made, not sure how long that will last.

Oh and don't forget to check back for the Advent calendar, few new items in it this year.

The new TOS (Terms of Service) are now live. They contain new legal rules, new rules for the Flame Forum and expansion / clarification of lots of the old rules. Please read them in full as they are now in full effect. They can be found at the following link.

TOS : http://portal.legacy-game.net/tos.php

We may revise them in the coming days if any issues arise, but they have been checked by staff and elders already. Ignorance to these rules is not an excuse for breaking them.

I'm going to a LAN party this week-end so will not be around much, I'll still be available though should anything explode. The source code for the exploit I fixed has been posted on the main forum, my god some people get confused by dynamically generated images. That image shows the session ID and account name of the person viewing it, it is not a static image.

I think I got everything done from LegCon, was quite productive if stressful to try and control at the time. Make sure you check out the Ability thread in the Suggestions forum. I'll need to add some new abilities to the game in a couple of weeks and that is where I'll be getting them from.

With the new combat system I really wanted to add some healing abilities but it hurts my head trying to work out how to balance them.

All these error messages suck, I'm going to tone back the CSRF protection a bit to fix them. Right now the key changes constantly as you cycle through pages, this seems a little overkill for the problem. As long as you don't go entering the "key=value" from your URL in to any other sites it should be pretty secure with a more static key. I think I'll try just changing it on logins for now, then see if I can write an exploit that will get around it.

I'll be waiting a few days before releasing the source code for the exploit, sorry for the inconvenience of all these error messages. They will be fixed shortly.