Quote:
Originally posted by inSertCoiN@Mar 16 2005, 15:33
hmmm... heres my gues what should be done by someone whose good with decryption:
1.CO sents package
2.get the package and dont alow it to go to server
3.decrypt/edit the package (for ex.change the amount of mony picked up from 100 to 100.000)
4.encrypt/sent the new package
This is just a gues, i'm not good at this things ;)
|
let me try to explain
everything, every information, all like how much exp, how much money, what item, and so on.... is on the server
when you log in with your client its like whatching a interactive movie you only see what happens and you can decide what your char should do but "only" something like go there, lott that, kill that... so if you decide that your char should do something you tell the server and the server writes a skript (he calculates the way, calc the dmg you do even calculate if you can go there he makes everything) when the server is ready (he only needs some nano seconds) he sends to your client the calculated movie and while he sends you that you can decide waht to do next and so on thats how you play that game
the cast fly on someone else bug is cause of a server bug. the server don`t checks if the player id the fly is cast on is the caster himself and the only protection against that is the ini file in your conquer client folder cause every thing that the server has to calculate and to check needs time and when some hundred players play the server has alot to do so they try to reduce the amount the server has to do and maybe they never thought someone would change that to cast fly on someone else
so if you want to find an exploit you have to find something the developers never thought of and let the check at the client
there are some other exploits posible so have alot fun search for them ;)
hope that helps to answer all or most of your questions about server / client cases