php SGE

Name: phpSGE (PHP Strategy Game Engine)

Version: 0.6.0.355

Genre: Strategy Game Engine (NOT RPG - city-building/resource management)

Type: Opensource game engine/toolkit

Developers: Aldrigo Raffaele and Kushnir Nikita (11VKSS iT-Group)

Additional Contributors: Raffa50, AgManiX de Mal

Website: rpvg.altervista.org/phpsge/ (official game list registration)

License: Opensource (specific license not documented)

Date: Version 0.6.0.355 (active development, 2010s era based on version system)

UNIQUE DISTINCTION: First strategy game engine in this collection (vs character-based RPGs). Represents the Travian/OGame genre of browser-based empire-building games with resource management, military units, alliances, and territorial conquest.

File Composition

• 63 PHP files (5,883 total lines) - small/medium codebase
• 72 .lng language files (23 KB) - RECORD for internationalization!
• 59 SQL files (48 KB) - extensive version update system
• 49 PNG images (214 KB)
• 11 JPG images (59 KB)
• 8 GIF images (97 KB)
• 7 CSS files (138 KB)
• 6 JavaScript files (190 KB)
• 2 TPL template files (2.5 KB)
• 1 ICO file (1.3 KB) - favicon
• 1 CUR file (2.2 KB) - custom cursor
• Total: 280 files

Largest PHP Files

• Snoopy.class.php (1,170 lines) - HTTP client library for external requests
• func.php (465 lines) - Core game functions and sge_main class
• register.php (289 lines) - Registration system
• index.php (259 lines) - Main entry point with auto-updater
• xconfig.php (258 lines) - Configuration management
• log-reg.php (199 lines) - Login/registration logic
• map2.php (187 lines) - Map system implementation
• rulers.php (164 lines) - Leaderboards
• units.php (149 lines) - Military unit management
• ally.php (122 lines) - Alliance system

Database Schema

18 core tables (phpsge-base060.sql, 272 lines):

• ally, ally_pact - Alliance system with war/NAP/ally pacts
• bque - Building construction queue
• builds - Player buildings (id, level, planet, function)
• city - Player cities with resources (res1/res2/res3), population, galaxy coordinates
• cmsg - Chat messages (AJAX system)
• conf - Global configuration (news, rulers, timers, version)
• market - Trading offers (resource exchange)
• plugins - Plugin activation system
• races - Race definitions with descriptions/images
• resdata - Resource types (Gold, Mana, Power + production rates)
• research, rque - Technology research system with queue
• resmov - Resource transport between cities
• tutorial - Tutorial system
• t_builds, t_research, t_unt - Template tables (building/research/unit definitions)
• umsg - User messaging system
• units, uque - Military units with movement/action states
• users - Player accounts (32-char password field = MD5)
• warn - Warning system

Entry Point (index.php)

`php

// Auto-redirect to installer if not configured

if (!file_exists("config.php")) {

header("Location: ./install/index.php");

}

// AUTOMATIC DATABASE UPDATER!

$old_ver = sge_ver();

if((int)$newver > (int)$old_ver) {

include("adm/updater/proc.php");

updateDB($old_ver);

}

// OOP Login System

if ($_POST['nik']) {

$log = new sge_login();

$log->username = $_POST['nik'];

$log->password = $_POST['pass'];

$log->login();

}

// Game Registration to Official List

include "adm/Snoopy.class.php";

$snoopy = new Snoopy;

$submit_url = "http://rpvg.altervista.org/phpsge/do.php";

$snoopy->submit($submit_url, $submit_vars);

`

Main Game Class (func.php)

`php

class sge_main {

var $username;

var $id_city;

var $id;

// Resource production system (post-035)

public function resources() {

// Time-based resource accumulation

// Magazine capacity limits (if MAG_E enabled)

// Per-building production rates

}

// Building queue system

function que_build($bid, $id_city, $field=NULL) {

// Cost calculation with level multipliers

// Resource verification

// Population requirements (if POP_E enabled)

// Points awarded

}

// Research queue

function que_research($idres) {

// Technology unlock system

}

// Military unit training

function qunt($id_unt, $uqnt) {

// Unit cost calculation

// Barracks level time reduction

// Training queue

}

// Combat resolution

function bataglia($city_id) {

// Attack/defense calculations

// Unit casualties

// Resource plunder

}

}

`

Version Control System

Version Variables (func.php):

`php

$confcver = "053"; // Config version

$newver = "060"; // Latest DB version

$scriptver = "059"; // Script version

`

Auto-Updater (adm/updater/proc.php):

• Reads SQL files from adm/updater/046.sql through 059.sql
• Older updates in 026-035/ subdirectory
• Applies sequential database migrations automatically
• 59 SQL update files tracking complete version history!

1. Multi-Language Support (72 Files!)

Language directories:

• en/ (English) - 18 .lng files
• it/ (Italian) - 18 .lng files
• ru/ (Russian) - 18 .lng files
• [DEV]1337/ (Development/l33t speak?) - 18 .lng files

Per-language modules:

`

admcp.lng, ally.lng, barraks.lng, battle.lng, buildings.lng,

chat.lng, highscore.lng, index.lng, install.lng, map.lng,

map2.lng, market.lng, menu.lng, pm.lng, profile.lng,

research.lng, settings.lng, var.lng

`

Most comprehensive i18n in entire collection (previous max: 4 languages in Phaos).

2. Automatic Database Updater

`php

function updateDB($old_ver) {

// Reads version-specific SQL file

if((int)$old_ver < 36) {

$str = file_get_contents("./adm/updater/026-035/".$old_ver.".sql");

} else {

$str = file_get_contents("./adm/updater/".$old_ver.".sql");

}

// Replace prefix and execute batch

$str = preg_replace("'%PREFIX%'", TB_PREFIX, $str);

mysql_exec_batch($str);

}

`

Version tracking: 35+ versions documented (026 → 060), seamless migration path for game admins.

3. Facebook Integration

facebook.sql: Dedicated tables for Facebook Connect authentication and social features. Represents mid-2000s push for social gaming integration.

Plugin system:

`sql

INSERT INTO %PREFIX%plugins VALUES

('fbplug', 'facebook', 0, NULL),

('fblog', 'fb/fb-log', 0, NULL);

`

4. Official Game Registration

Snoopy HTTP Client (1,170 lines): Submits game instance data to rpvg.altervista.org/phpsge/do.php to appear on official phpSGE game list. Creates community ecosystem of phpSGE-powered games.

5. Plugin Architecture

`php

// plugins/installed.php

$plugs = mysql_query("SELECT * FROM ".TB_PREFIX."plugins WHERE active =1");

while($riga = mysql_fetch_array($plugs)) {

define($riga['name'], $riga['active']);

include("plugins/".$riga['file'].".php");

}

`

Available plugins:

• facebook.php (563 bytes) - Facebook integration
• tut.php (3,193 bytes) - Tutorial system
• Database-controlled activation/deactivation

6. Galaxy Map System

3 map implementations:

• map1.sql - Basic map
• map2.sql - Enhanced map (map2.php - 187 lines)
• map3.sql - Alternative layout

City coordinates: Galaxy/System/Position for spatial strategy gameplay.

Resource System

3 base resources (expandable):

`sql

INSERT INTO %PREFIX%resdata VALUES

(1, 'Gold', 5, 500, NULL), -- 5 per hour production

(2, 'Mana', 1, 500, NULL), -- 1 per hour production

(3, 'Power', 2, 510, NULL); -- 2 per hour production

`

Time-based accumulation:

`php

$diffd = ($mtimet - $ktimer) / 3600; // Hours since last update

$res1_ora = $riga['prod_rate'] * $abbl_r1['lev']; // Production per hour

$up_res1_tot = $qres1 + ($res1_ora * $diffd);

`

Magazine capacity system (optional):

`php

if(MAG_E == "1") {

$r_max = $mag_lv * 100 + MG_max_cap;

if ($up_res1_tot > $r_max) { $up_res1_tot = $r_max; }

}

`

Building System

Sample buildings:

`sql

INSERT INTO %PREFIX%t_builds VALUES

(1, 'barraks', 'barraks', 'barraks.gif', 'barracks', 0, 0, 0.25, 70, 0, 0, 30, 0.25, 3, 1, 0, 0, 15, 0),

(2, 'Gold Mine', 'res1', 'mine.gif', 'gold mine', 0, 0, 0.25, 50, 0, 0, 15, 0.25, 0, 0, 0, 0, 10, 0),

(3, 'Mana node', 'res2', 'node.gif', 'mana pool', 0, 0, 0.25, 50, 0, 0, 15, 0.25, 2, 1, 0, 0, 10, 0),

(4, 'Research Lab', 'reslab', '31.gif', NULL, 0, 0, 0.25, 60, 30, 0, 55, 0.25, 3, 2, 0, 0, 15, 0);

`

Features:

• Construction queue (bque table) - time-based building completion
• Level-based costs: cost = base_cost + (base_cost level res_mpl)
• Time scaling: time = base_time + (base_time level time_mpl)
• Prerequisites: Buildings/research required before construction
• Population requirements (optional POP_E system)
• Points awarded for construction progress

Military System

Unit definitions:

`sql

INSERT INTO %PREFIX%t_unt VALUES

(1, 'milita', 1, 'milita.gif', 5, 5, 5, 10, 1, 25, 3, 0, 20, 'a simple soldier', NULL, 0, 0, 0, 0),

(2, 'Drago', 1, 'rdragus.gif', 55, 55, 30, 10, 1, 900, 600, 0, 300, 'the powerful dragon!', NULL, 0, 0, 0, 0);

`

Stats:

• atk - Attack power
• dif - Defense rating
• vel - Movement speed
• res_car_cap - Resource carrying capacity (raiding)
• pop_req - Population consumed
• etime - Training time
• Race-specific units available

Unit states (action field):

• 0 = In city (garrison)
• 1 = Attacking
• 2 = Reinforcing ally
• 3 = Returning home

Combat System (battle.php)

`php

// Attack initiation

if($_POST['act'] == "atk") {

$aftunt = $su['uqnt'] - $_POST['qnt']; // Deduct attackers

$timeend = mtimetn() + 30; // Travel time

mysql_query("UPDATE units SET

from = '$sge->id_city',

to = '".(int)$_POST['dp']."',

where = NULL,

time = '$timeend',

action = '1'

WHERE id =".$su['id']);

}

`

Combat resolution (func.php bataglia()):

• Attack vs Defense calculations
• Unit casualties based on power differences
• Resource plunder mechanics
• Battle reports sent via messaging system

Alliance System

Tables:

• ally - Alliance metadata (name, description, owner, points, access control)
• ally_pact - Diplomatic relations between alliances

Pact types:

• 0 = WAR (hostile)
• 1 = NAP (non-aggression pact)
• 2 = ALLY (friendly alliance)

Access control:

• 0 = Open (users can join freely)
• 1 = Request (users can request membership)
• 2 = Invite-only (admin sends invitations)

Research System

`sql

INSERT INTO %PREFIX%t_research VALUES

(1, 'magic servant', NULL, 0, 'null.gif', 50, 100, 0, 15, 0, 0, 0, 0, 0);

`

Research queue (rque table): Technology unlocks with time/resource costs, prerequisites, and level progression.

Market System

Resource trading:

`sql

CREATE TABLE %PREFIX%market (

owner int(10) unsigned NOT NULL,

resoff smallint(1) unsigned NOT NULL, -- Resource offered

resoqnt int(15) unsigned NOT NULL, -- Quantity offered

resreq smallint(1) unsigned NOT NULL, -- Resource requested

resrqnt int(15) unsigned NOT NULL -- Quantity requested

)

`

Player-to-player resource exchange (known bug: "cannot accept offer").

Password Handling

Login (log-reg.php):

`php

$this->password = strip_tags($this->password);

$q = "SELECT * FROM ".TB_PREFIX."users

WHERE username = '".mysql_real_escape_string($this->username)."'

AND password = '".md5($this->password)."' LIMIT 1";

`

Registration:

`php

$pass = md5($_POST['rpass']);

$reg = "INSERT INTO ".TB_PREFIX."users

(username, password, ...)

VALUES ('".mysql_real_escape_string($nik)."', '$pass', ...)";

`

Security measures:

• MD5 password hashing (weak by modern standards)
• mysql_real_escape_string used consistently
• strip_tags on username/password inputs
• No salting of password hashes
• No bcrypt/argon2 (MD5 vulnerable to rainbow tables)

SQL Injection Prevention

Consistent escaping in func.php:

`php

function snmsg($from, $to, $mtit, $msg, $mtp=1, $aiid=NULL) {

$mtit = mysql_real_escape_string($mtit);

$msg = mysql_real_escape_string($msg);

mysql_query("INSERT INTO ".TB_PREFIX."umsg

(from, to, mtit, text, read, mtype, aiid)

VALUES ('$from', '$to', '$mtit', '$msg', '0', '$mtp', '$aiid')");

}

`

Integer casting for IDs:

`php

$qcb = mysql_query("SELECT * FROM ".TB_PREFIX."t_builds WHERE id ='".(int)$bid."' LIMIT 1");

`

Good: Widespread use of mysql_real_escape_string and (int) casting

⚠️ Concern: Some direct POST variable usage without validation (e.g., battle.php)

XSS Prevention

• No htmlspecialchars/htmlentities output encoding observed
• strip_tags on some inputs
• ⚠️ User-generated content (chat, messages, alliance names) potentially vulnerable

Session Security

`php

session_start();

if ($_SESSION['log'] == "y") { header("Location: main.php"); }

`

• Basic session-based authentication
• No session regeneration on login
• No CSRF token protection observed

SECURITY RATING: 5/10

Strengths:

• Consistent SQL escaping with mysql_real_escape_string
• Integer casting for numeric IDs
• strip_tags on critical inputs
• MD5 password hashing (better than plaintext)

Weaknesses:

• MD5 without salting (vulnerable to rainbow tables)
• No bcrypt/modern password hashing
• Missing output encoding for XSS prevention
• No CSRF protection
• mysql_* functions (deprecated, should use mysqli/PDO)
• Some unvalidated POST inputs in battle.php

Comparison: Similar security level to other 2006-2010 era games. Better than plaintext passwords, worse than games with triple-escaping or modern hashing.

Configuration System

Modular features (config.php defines):

• MAG_E - Magazine/warehouse capacity system (1=enabled, 0=disabled)
• POP_E - Population system (1=enabled, 0=disabled)
• CITY_SYS - City system type (1 or 2, affects field placement)
• REG_PAGE - Custom registration page path
• TEMPLATE - Template directory selection
• LANG - Default language
• TB_PREFIX - Database table prefix for multi-installation support

Template System

Minimal implementation:

• 2 TPL files (templates directory)
• PHP-based template files: include("templates/".TEMPLATE."/body.php")
• Not Smarty-based (unlike many other games)

Version Tracking Excellence

Three-tier versioning:

`php

$confcver = "053"; // Config file version

$newver = "060"; // Target DB version

$scriptver = "059"; // Current script version

`

Database version storage:

`sql

CREATE TABLE %PREFIX%conf (

sge_ver varchar(5) NOT NULL default '047',

UNIQUE KEY sge_ver (sge_ver)

);

`

35+ documented updates (026 → 060) = ~35 version releases tracked meticulously.

JavaScript/AJAX Integration

6 JavaScript files (190 KB):

• AJAX chat system (100% complete per version notes)
• Dynamic map interactions (map2.php)
• Real-time updates without page refresh

Modern for 2010 era: AJAX was cutting-edge for browser games at the time.

Image Assets

68 image files (370 KB total):

• Building graphics (mine.gif, barraks.gif, node.gif)
• Unit sprites (milita.gif, rdragus.gif)
• Race icons (achon.jpg)
• Map terrain/planets
• UI elements (cursor: 2.2 KB .cur file!)

Known Issues (Version.txt)

Active bug list:

• Script updater (index.php) - auto-updater malfunction
• Delete Account (settings.php) - cannot delete accounts
• Go on Holiday (settings.php) - vacation mode broken
• CSS bug in ubar font (map2.php) - display issue
• Cannot accept offer (market.php) - trading broken
• Units bug (admin CP barracks) - unit management
• Researches bug (admin CP) - research management
• Alliance config button missing - incomplete UI

Recent fixes (completed):

• AJAX chat 100%
• Language system fixed
• buildings.php upgrade text
• Player profile links in highscore
• map2 cell clicking

TODO list:

• Max level implementation
• Demolish buildings (only for pop system)
• Replace resource ID with resource name in market

Transparency: Honest documentation of current state shows active development mindset.

Official Game Network

Registration system (index.php):

`php

$snoopy = new Snoopy;

$submit_url = "http://rpvg.altervista.org/phpsge/do.php";

$snoopy->submit($submit_url, $submit_vars);

`

Purpose: Creates centralized directory of phpSGE-powered games. Promotes engine adoption by showcasing live instances.

Developer website: rpvg.altervista.org/phpsge/ (Altervista free hosting platform, popular in Italy).

International Appeal

4 language packs (72 total files) demonstrate:

• European focus (English, Italian, Russian)
• Italian development origin (Aldrigo Raffaele)
• Russian co-developer (Kushnir Nikita - 11VKSS iT-Group)
• Development language ([DEV]1337 - possibly l33tspeak for testing)

Installation System

install/ directory:

• index.php - Web-based installer
• sql/ - Database schemas (phpsge-base060.sql + map variations + facebook.sql)
• Automatic config.php detection and redirect

Admin tools:

• admcp.php (98 lines) - Admin control panel
• adm/updater/ - 59 SQL update files
• adm/Snoopy.class.php - HTTP client library

Genre Shift

First strategy game engine in collection. Previous 53 games were character-based RPGs (progression, equipment, quests). phpSGE represents the Travian/OGame/Ikariam genre:

• City-building focus
• Resource management
• Territory control
• Military conquest
• Alliance diplomacy
• Long-term empire building

Browser strategy game boom (2006-2010):

• Travian (2004) - massive success
• OGame (2002) - space strategy
• Ikariam (2008) - ancient civilization
• phpSGE positions as opensource alternative for hobbyist developers

Comparison to Collection

Codebase size:

• Smallest functional engine yet at 5,883 lines
• vs phpRPG 13,784 lines
• vs Phaos 17,422 lines
• vs MCCodes 67,836 lines
• vs Orodin 107,435 lines

Despite small size, includes:

• Complete strategy game mechanics
• 72-language support (RECORD!)
• Auto-updater (59 versions!)
• Facebook integration
• Plugin system
• Map system
• Alliance diplomacy

Efficiency through simplicity: Minimal feature set executed well rather than feature bloat.

Version History Insights

35+ versions (026 → 060):

• Version 026-035: Early development (separate directory)
• Version 036-045: Core feature development
• Version 046-059: Active updates (adm/updater/)
• Version 060: Current base schema

Development arc:

• 2006-2007: Initial creation (estimated)
• 2008-2010: Feature additions (Facebook integration, maps, plugins)
• 2010-2012: Refinement phase (v0.6.0.355)

Technology Stack

Mid-2000s standards:

• PHP 5.x (no namespaces, mysql_* functions)
• MySQL 4.x/5.x (MyISAM engine, no InnoDB constraints)
• JavaScript + AJAX (cutting edge for browser games)
• No frameworks (vanilla PHP)

Modernization needs:

• mysqli or PDO instead of mysql_*
• bcrypt/argon2 instead of MD5
• Prepared statements
• InnoDB with foreign keys
• CSRF protection

Completeness Assessment

Core features implemented:

• Resource production (time-based)
• Building construction (queue system)
• Military units (training + combat)
• Research/technology
• Alliance system
• Map/territory
• Market/trading
• Chat system (AJAX)
• Messaging
• Rankings
• Tutorial
• Multi-language
• Admin panel

Known broken features:

• ⚠️ Market offer acceptance
• ⚠️ Delete account
• ⚠️ Holiday mode
• ⚠️ Admin CP units/research

Playability: 70% - Core gameplay loop functional but several features broken.

Strengths

• Record internationalization - 72 language files, 4 complete translations
• Automatic updater - 59-version migration system
• Small codebase - 5,883 lines, easy to customize
• Modular design - MAG_E, POP_E, CITY_SYS toggles
• Plugin architecture - Extensible without core modifications
• Facebook integration - Social gaming features
• Official game network - Community ecosystem
• Complete strategy mechanics - Not a demo, full game engine
• Active development - Bug list + TODO shows ongoing work
• Version tracking - Excellent update documentation

Weaknesses

• Multiple known bugs - 8 issues documented in Version.txt
• MD5 passwords - Weak security, no salting
• mysql_* functions - Deprecated in PHP 7+
• Missing XSS protection - No output encoding
• Incomplete features - Market broken, admin CP issues
• Minimal documentation - No README or comprehensive docs
• No license specified - "Opensource" without GPL/MIT/etc declaration
• Template system - Basic PHP includes, not modern MVC
• No CSRF protection - Vulnerable to cross-site attacks
• Small community - Less established than Travian/OGame clones

Target Audience

Ideal for:

• PHP developers wanting strategy game engine
• International game operators (72-language support!)
• Hobbyist game admins (small, customizable codebase)
• Learning resource (clean code, well-structured)

Not suitable for:

• Production deployment without security fixes
• Non-technical users (requires PHP knowledge to fix bugs)
• Modern PHP 7/8 environments (mysql_* deprecated)

Comparison to Similar Games

vs Travian/OGame clones in collection:

• phpSGE is more customizable (modular features)
• Smaller codebase (easier to modify)
• Better internationalization (72 files!)
• Less polished (known bugs)

vs RPG engines:

• Different genre entirely
• Focus on strategy over character progression
• Alliance-centric vs solo gameplay
• Territory control vs quest completion

Overall Rating: 6/10

Breakdown:

• Code Quality: 6/10 (clean structure, but mysql_* deprecated)
• Security: 5/10 (SQL escaping good, password hashing weak)
• Features: 7/10 (complete strategy mechanics, some broken)
• Innovation: 8/10 (auto-updater, 72 languages, game network)
• Playability: 6/10 (70% functional, notable bugs)
• Documentation: 4/10 (Version.txt exists, no comprehensive docs)

Tier Classification: MID-TIER ENGINE

Verdict: phpSGE is a capable strategy game engine with exceptional internationalization (72-language RECORD!) and an innovative auto-updater system. The small codebase (5,883 lines) makes it highly customizable, and the modular design (MAG_E, POP_E toggles) allows admins to tailor gameplay. The official game registration network creates a community ecosystem unique in this collection.

However, multiple known bugs, weak MD5 passwords, deprecated mysql_* functions, and missing XSS protection prevent production deployment without significant security hardening. The template system is basic, and several features (market, account deletion, holiday mode) are documented as broken.

Best use case: Learning resource or customization base for PHP developers creating strategy games. With security fixes and bug resolution, could be a solid mid-tier engine. The version tracking system (59 SQL files!) is exemplary and should be studied by other engine developers.

Historical significance: Represents the browser strategy game boom (2006-2010 era) when Travian/OGame inspired countless clones. phpSGE offered an opensource alternative, and the 72-language support demonstrates serious ambition for international deployment. The game registration network shows forward-thinking community building.

For 2010-era standards: 7/10 (modern for its time)

For 2025 deployment: 4/10 (needs modernization)

---

Analysis Date: December 11, 2025

Archive Location: d:\_HOUSE\SOCIALMUD\WWW\_MUD Games\unzipped\php_sge\phpSGE\

Game #54 of 79 in systematic browser game analysis project