Need some professional help ...

01/15/2014 10:14 a7la_pop#1
Greetings to every one ,

i got this problem in one of the servers i play in , it's version 5839 [Private server], the problem is there is a player who can somehow generate CPs with out any permission from the server like being GM/PM etc.., we tried so hard to find out how he does it and we couldn't but what i am sure of it's not client sided bug , so any ideas about what could he do for that and how he is doing it?or if its possible to actually hack CPs?
01/15/2014 13:00 abdoumatrix#2
can't it must be a serverside bug
to fix u had to now it first.
01/15/2014 15:40 Aceking#3
Eh it could be a bit of both. If there are no server side checks in place, then a player can then send packets to the server and without any checks in place, then they could easily claim items etc.

For example, an NPC gives CP rewards, but if there is no server side check in place, a player can keep opening that dialog to claim those rewards repeatedly.
01/15/2014 17:36 SteveRambo#4
Quote:
Originally Posted by Aceking View Post
Eh it could be a bit of both. If there are no server side checks in place, then a player can then send packets to the server and without any checks in place, then they could easily claim items etc.

For example, an NPC gives CP rewards, but if there is no server side check in place, a player can keep opening that dialog to claim those rewards repeatedly.
How exactly is that a "bit of both"? :confused:
01/15/2014 17:53 abdoumatrix#5
Quote:
Originally Posted by Aceking View Post
Eh it could be a bit of both. If there are no server side checks in place, then a player can then send packets to the server and without any checks in place, then they could easily claim items etc.

For example, an NPC gives CP rewards, but if there is no server side check in place, a player can keep opening that dialog to claim those rewards repeatedly.
so it is still server side bug.

but most Npcs have checks so u can take the prize
01/15/2014 19:46 a7la_pop#6
Quote:
Originally Posted by Aceking View Post
Eh it could be a bit of both. If there are no server side checks in place, then a player can then send packets to the server and without any checks in place, then they could easily claim items etc.

For example, an NPC gives CP rewards, but if there is no server side check in place, a player can keep opening that dialog to claim those rewards repeatedly.
that would be kinda true if there was any NPC gives CP rewards, but they server has no such NPC :(
01/15/2014 22:49 CptSky#7
Remember me the good old money/CPs hack in LOTF sources :p
01/16/2014 08:37 Yupmoh#8
Not everyone places checks on NPCs, So yeah maybe trace that player and find out how he does it? Like put CPs watch or something that would alert you in the console if someone has alot of CPs or gaining CPs pretty quick, Shouldn't be hard to do and it might help (From my own experiences it worked).
01/16/2014 09:39 marcbacor6666#9
mostly public sources have no event claiming prize check, be sure to review all ur npc where the players claim their prizes in an event.
01/16/2014 12:30 Aceking#10
Could also be sending the packet with a chat command and the server isn't checking his permissions.
Could be the dragonball exchange NPC...

Could be alot
01/16/2014 13:53 Soulfly25#11
try to check in the packethandler.cs maybe there's a command their that an Ordinary Player can make/type a command @cps <value>..
01/17/2014 04:17 eshemaun2#12
have you checked to ctf award npc? i noticed that they can claim the cp's over and over. had to fix that one lol.
01/17/2014 08:16 a7la_pop#13
Quote:
Originally Posted by marcbacor6666 View Post
mostly public sources have no event claiming prize check, be sure to review all ur npc where the players claim their prizes in an event.
Meh it's not a public source . and we don't have any event that could give u a cps as a prize.

Quote:
Originally Posted by eshemaun2 View Post
have you checked to ctf award npc? i noticed that they can claim the cp's over and over. had to fix that one lol.
no sir we don't have CTF yet.