[INFORMATION] SQL Injection (ingame)

Quote:

Originally Posted by Locklyon Yeah by putting packets and changing the name and yet it'll perform a lil better so it's still shit, you know what I mean. But who cares, 99% of the filters in SRO are actually re-coded filters.

Where did I mention "changing the name" as long as you can improve the base, re-inventing the wheel is completely bullshit

Quote:

Originally Posted by Timlock I did that....

You could have improved a currently released base. You just took the long way to do something someone already achieved.

Quote:

Originally Posted by Locklyon Fixing a bad source is idiotic, creating a good one is easier. But yes, you can always have something that works at a low cost.

Quote:

Originally Posted by LastThief* Building from scratch is fucking idiotic to be honest, do not re-invent the wheel, if it works it works.

Both are good practice and actually fun :S unless it's all async stuff where you can't debug. Fun turns into cancer.

Disable this Npc tab who cares about it daufq

Quote:

Originally Posted by @$$ Disable this Npc tab who cares about it daufq

readd in client and gg

Quote:

Originally Posted by @$$ Disable this Npc tab who cares about it daufq

In client can be re-added, better to disable in database ( IntroductionModificationPermission ).

How can we get rid of this exploit? Seems kinda senseless to bring up a server with this working..

Quote:

Originally Posted by -Luffy- How can we get rid of this exploit? Seems kinda senseless to bring up a server with this working..

There are a few solutions already posted in this thread. Just read ^^

Quote:

Originally Posted by QuantumRising There are a few solutions already posted in this thread. Just read ^^

Heh, lazyness. I found a few thanks :mofo:

Quote:

Originally Posted by -Luffy- Heh, lazyness. I found a few thanks :mofo:

KRYLFILTER :D

Quote:

Originally Posted by Syloxx readd in client and gg

Pack/encrypt your media.pk2 and gg

Isn't hard to unpack specifically since a blowfish reader DLL is released (by Cherno if I remember right)

So I wouldn't secure my server by a client side storaged password
And what stops u using another client just for that action?

Before you come up with an idea please make sure it's Safe to use...

party finish?

Quote:

Originally Posted by ​Goofie​ Fix for packet filters PHP Code:             #region 0x705E_CLIENT_EXPLOIT             if(_pck.Opcode == 0x705E)             {                 string message = _pck.ReadAscii();                 if(message.Contains("'"))                 {                     //message;                     continue;                 } else if(message.Contains("\""))                 {                     //message;                     continue;                 } else if(message.Contains("-"))                 {                     //message;                     continue;                 }             }             #endregion

i Need Fix This Problem
Can You Told Me How ?

Quote:

Originally Posted by gmroske i Need Fix This Problem Can You Told Me How ?

Private message + usd

But it is just possible to get access to SRO_VT_SHARD.dbo or can i get access to SRO_VT_ACCOUNT.dbo too?