[FIX][C++] SQL Injection in Messenger and Guild

12/19/2015 12:36 oceanusPT#46
Quote:
Originally Posted by naosou View Post
Code:
This difference file is created by IdaPro

game
002EB6F5: 01 00
Code:
This difference file is created by IdaPro

db
00082F15: 01 00
Can any one tell what this diff does? What this fix?
12/19/2015 13:44 naosou#47
Quote:
Originally Posted by oceanusPT View Post
Can any one tell what this diff does? What this fix?
Did you read the topic?
You asked for a 34k diff to fix this issue, and there it is.
12/19/2015 14:00 xworldx#48
yes, what is diferent between 002EB6F5: 01 00 and
game_2089M
0010F5C3: 31 90
0010F5C4: C0 90
0010F5C5: 8B 90 .......


in game game_2089M is also 002EB6F5: 01

Thank you
12/19/2015 15:06 xP3NG3Rx#49
Quote:
Originally Posted by xworldx View Post
yes, what is diferent between 002EB6F5: 01 00 and
game_2089M
0010F5C3: 31 90
0010F5C4: C0 90
0010F5C5: 8B 90 .......


in game game_2089M is also 002EB6F5: 01

Thank you
iMer's dif disable the removing friend function.

And the first dif is changed the libsql/AsyncSQL.cpp Connect function.
Code:
if ( mysql_real_connect(
	 v1,
	 *(char **)(a1 + 968),
	 *(_DWORD *)(a1 + 972),
	 *(_DWORD *)(a1 + 976),
	 *(_DWORD *)(a1 + 980),
	 *(_DWORD *)(a1 + 1000),
	 0,
	 65536))
With this:
Code:
if ( mysql_real_connect(
	 v1,
	 *(char **)(a1 + 968),
	 *(_DWORD *)(a1 + 972),
	 *(_DWORD *)(a1 + 976),
	 *(_DWORD *)(a1 + 980),
	 *(_DWORD *)(a1 + 1000),
	 0,
	 0))
12/19/2015 15:08 xworldx#50
Quote:
Originally Posted by xP3NG3Rx View Post
iMer's dif disable the removing friend function.

And the first dif is changed the libsql/AsyncSQL.cpp Connect function.
Code:
if ( mysql_real_connect(
	 v1,
	 *(char **)(a1 + 968),
	 *(_DWORD *)(a1 + 972),
	 *(_DWORD *)(a1 + 976),
	 *(_DWORD *)(a1 + 980),
	 *(_DWORD *)(a1 + 1000),
	 0,
	 65536))
With this:
Code:
if ( mysql_real_connect(
	 v1,
	 *(char **)(a1 + 968),
	 *(_DWORD *)(a1 + 972),
	 *(_DWORD *)(a1 + 976),
	 *(_DWORD *)(a1 + 980),
	 *(_DWORD *)(a1 + 1000),
	 0,
	 0))

Ok, and what is better solution ?

what is your new diff?
game_2089M
0010F5C3: 31 EB
0010F5C4: C0 09
12/19/2015 16:35 oceanusPT#51
Quote:
Originally Posted by naosou View Post
Did you read the topic?
You asked for a 34k diff to fix this issue, and there it is.
maybe i ask wrong. i wanna know what de fix does. When i apply de diff, what will hapen?

i know this is a fix. But it will do what?
Players cant chat in guild?
this is what i ask... xD
12/19/2015 16:53 xP3NG3Rx#52
Quote:
Originally Posted by xworldx View Post
Ok, and what is better solution ?

what is your new diff?
game_2089M
0010F5C3: 31 EB
0010F5C4: C0 09
Same as iMer's dif, just I did not NOP the function, I JMP-ed it, shorter.
12/20/2015 17:29 bluedrago#53
please it is ok?
messenger
[Only registered and activated users can see links. Click Here To Register...]
[Only registered and activated users can see links. Click Here To Register...]
guild
[Only registered and activated users can see links. Click Here To Register...]
[Only registered and activated users can see links. Click Here To Register...]


compile is ok but is protect?
12/21/2015 21:15 Walion#54
Brauch fix für Version: 40250
40k Serverfiles
als diff bitte
12/21/2015 22:02 .Colossus.#55
Quote:
Originally Posted by Walion View Post
Brauch fix für Version: 40250
40k Serverfiles
als diff bitte
Du solltest wenn du schon die 40250 hast die source benutzen und das selber fixxen.
12/21/2015 23:03 Walion#56
Wo bekomme ich den die source her ?
12/22/2015 09:36 Mi4uric3#57
Quote:
Originally Posted by Walion View Post
Wo bekomme ich den die source her ?
[Only registered and activated users can see links. Click Here To Register...]
12/22/2015 11:14 hectoremarius#58
Hello.
I don't have source for 40K.
I want diff for 40K.
Thanks!
12/22/2015 20:02 Aze /..#59
Quote:
Originally Posted by hectoremarius View Post
Hello.
I don't have source for 40K.
I want diff for 40K.
Thanks!
U using a 40k game and no source? How is that even possible?
12/22/2015 21:47 Walion#60
Leute giebs das als diff nicht ?