Exploit or backdor

07 Iun 2019, 17:56

Escape String

Ene · 07 Iun 2019, 17:57

Moț scrie:da frt inventory_protect.cpp

https://mega.nz/#!NIE3WaLb!SnBL7JMajlc1 ... y2V_WgkrJw

Moț · 07 Iun 2019, 18:09

completeaza cu ce-a zis zenu

Ene · 07 Iun 2019, 18:12

ZeNu scrie:Escape String

scuze nu am inteles

sTrix. · 07 Iun 2019, 18:14

Ene scrie:
Moț scrie:da frt inventory_protect.cpp
https://mega.nz/#!NIE3WaLb!SnBL7JMajlc1 ... y2V_WgkrJw

Poftim EscapeString

. Schimba functia "bool CHARACTER::SetInventoryPassword(const char * password)" din inventory_protect.cpp

bool CHARACTER::SetInventoryPassword(const char * password)
{
	char szEscapedPassword[CHAT_MAX_LEN * 2 + 1];
	DBManager::instance().EscapeString(szEscapedPassword, sizeof(szEscapedPassword), password, strlen(password));

	char szQuery[1024];
	snprintf(szQuery, sizeof(szQuery), "UPDATE player.player SET inventory_password = '%s' WHERE id = '%d'", szEscapedPassword, GetPlayerID());
	SQLMsg * msg = DBManager::instance().DirectQuery(szQuery);

	if (msg)
	{
		return true;
	}
	else
	{
		return false;
	}

	M2_DELETE(msg);
}

Ene · 07 Iun 2019, 18:17

sTrix. scrie:
Ene scrie:
Moț scrie:da frt inventory_protect.cpp
https://mega.nz/#!NIE3WaLb!SnBL7JMajlc1 ... y2V_WgkrJw
Poftim . Schimba functia "bool CHARACTER::SetInventoryPassword(const char * password)" din inventory_protect.cpp
bool CHARACTER::SetInventoryPassword(const char * password)
{
	char szEscapedPassword[CHAT_MAX_LEN * 2 + 1];
	DBManager::instance().EscapeString(szEscapedPassword, sizeof(szEscapedPassword), password, strlen(password));

	char szQuery[1024];
	snprintf(szQuery, sizeof(szQuery), "UPDATE player.player SET inventory_password = '%s' WHERE id = '%d'", szEscapedPassword, GetPlayerID());
	SQLMsg * msg = DBManager::instance().DirectQuery(szQuery);

	if (msg)
	{
		return true;
	}
	else
	{
		return false;
	}

	M2_DELETE(msg);
}

asta va rezolva problema teoretic sau ?

sTrix. · 07 Iun 2019, 18:17

Ene scrie:
sTrix. scrie:
Ene scrie: https://mega.nz/#!NIE3WaLb!SnBL7JMajlc1 ... y2V_WgkrJw
Poftim . Schimba functia "bool CHARACTER::SetInventoryPassword(const char * password)" din inventory_protect.cpp
bool CHARACTER::SetInventoryPassword(const char * password)
{
	char szEscapedPassword[CHAT_MAX_LEN * 2 + 1];
	DBManager::instance().EscapeString(szEscapedPassword, sizeof(szEscapedPassword), password, strlen(password));

	char szQuery[1024];
	snprintf(szQuery, sizeof(szQuery), "UPDATE player.player SET inventory_password = '%s' WHERE id = '%d'", szEscapedPassword, GetPlayerID());
	SQLMsg * msg = DBManager::instance().DirectQuery(szQuery);

	if (msg)
	{
		return true;
	}
	else
	{
		return false;
	}

	M2_DELETE(msg);
}
asta va rezolva problema teoretic sau ?

da

Ene · 07 Iun 2019, 18:19

sTrix. scrie:

Ene scrie:

sTrix. scrie: Poftim

. Schimba functia "bool CHARACTER::SetInventoryPassword(const char * password)" din inventory_protect.cpp

bool CHARACTER::SetInventoryPassword(const char * password)
{
	char szEscapedPassword[CHAT_MAX_LEN * 2 + 1];
	DBManager::instance().EscapeString(szEscapedPassword, sizeof(szEscapedPassword), password, strlen(password));

	char szQuery[1024];
	snprintf(szQuery, sizeof(szQuery), "UPDATE player.player SET inventory_password = '%s' WHERE id = '%d'", szEscapedPassword, GetPlayerID());
	SQLMsg * msg = DBManager::instance().DirectQuery(szQuery);

	if (msg)
	{
		return true;
	}
	else
	{
		return false;
	}

	M2_DELETE(msg);
}

asta va rezolva problema teoretic sau ?

da

ok incerc si revin daca tot persista problema

Athero · 10 Iun 2019, 06:09

Mai sigur :

inventory_protect.cpp

add include

Cod: Selectaţi tot

#include <string.h>

bool CHARACTER::SetInventoryPassword(const char * password)

modifica toata functia cu

Cod: Selectaţi tot

bool CHARACTER::SetInventoryPassword(const char * password)
{
	char passwordEscaped[7];
	DBManager::instance().EscapeString(passwordEscaped, sizeof(passwordEscaped), password, strlen(password));
	char szQuery[1024];
	snprintf(szQuery, sizeof(szQuery), "UPDATE player.player SET inventory_password = '%s' WHERE id = '%d'", passwordEscaped, GetPlayerID());
	SQLMsg * msg = DBManager::instance().DirectQuery(szQuery);

	if (msg)
	{
		return true;
	}
	else
	{
		return false;
	}

	M2_DELETE(msg);
}

Exploit or backdor

Exploit

Exploit

Exploit CH down

Exploit

Cine este conectat