[RELEASE]PS_LOGIN WITHOUT EXPLOITS

06/11/2018 17:14 hronolight#1
Hi all.

Recently, some devs have encountered a new exploit, related to the connections count to ps_login
[Only registered and activated users can see links. Click Here To Register...]
As a result, no one could connect to the server and received Error 0
[Only registered and activated users can see links. Click Here To Register...]

This ps_login contains fixes off all known exploits at the moment:
  1. SQL Injection fix from JujiPoly [Only registered and activated users can see links. Click Here To Register...]
  2. Handshake fix by Anton1312 [Only registered and activated users can see links. Click Here To Register...]
  3. Connection overflow (Error 0) fix from me
[Only registered and activated users can see links. Click Here To Register...]

Have fun!
06/11/2018 17:16 Sasori12#2
:)
06/11/2018 22:43 Brownback#3
Good release
06/15/2018 04:51 trysten#4
In the client part it presents this error after uses seur file
[client is not compatible]
06/15/2018 07:21 perlisson#5
in login use command : /vchkoff
07/09/2018 10:32 ShaiyaIwanttolearn#6
just take my doubts, I am not here to accuse anyone, because if this dll, tries all explorations corrected, this is a great help for shaiya community.

many informed that they are using this new ps_login

Comunicado a Developers y comunidad "Shaiya"

Últimamente han habido intentos de perjudicar a servidores Shaiya tratando de hackear cuentas de usuarios de diferentes servidores. Esto se debe a que han hackeado base de datos con gran cantidad de usuarios de otros servidores con lo que aprovechan esta información para perjudicar cuentas de los diferentes servidores existentes.

Como ReMasterGames los servidores que están bajo nuestro soporte estos no han sido vulnerados pero si han entrado a sus cuentas con estos datos. Por ello *ES DE VITAL IMPORTANCIA* que los usuarios de cada servidor siempre cambien sus contraseñas y jamas ocupar las mismas en todos los juegos.

Para la comunidad Developers y administrador de servidores recomendamos tener política de backup diarios, proteger conexión a base de datos por bloqueo de IP externa. analizar constantemente sus maquinas en busca de malwares o backdoor

Adjuntamos ultima actualización de PS_Login.exe segura para evitar inyecciones de PS Login a sus base de datos.

[Only registered and activated users can see links. Click Here To Register...]


[Only registered and activated users can see links. Click Here To Register...]

[Only registered and activated users can see links. Click Here To Register...]
07/09/2018 14:04 Призрак урана#7
I correctly understood that you removed check for the number of open sockets? If so, how will your fix behave after exceeding the number of available sockets?
07/09/2018 17:42 hronolight#8
Yes, i just remove the checking.
Of course, this is not a complete solution. But, it seems to me, this can help (and as it was defined - it has already helped some people).
I'm not an expert on network technologies, but it seems to me that the full fix of this problem should not be in server files, but in ddos protection or firewall.
07/31/2018 22:05 Propice#9
what did you actually changed? can you post the CE script of this fix?
05/02/2020 06:21 Comando0101#10
Alguém tem a correção de duplicar item do shaiya 4.5?