First, dont laugh at him. Every time you see "Pease wait before using another magic attack.", it is client side. No packets are sent to the server. That means that it can be modified in the code. You could remove the check for whether you could cast another in the client. I don't know where you would change values, but I'm sure it could be done. Also, does anyone know how the server actually checks time? Almost every packet contains the tick-count of the client. If this is the only thing that is checked, then perhaps it could be spoofed. Something like modifying the tick-count in the packet before it is sent to make the server believe that more time has elapsed client side. However, if the server uses its own clock to determine whether or not you can attack (and it likely does) this will have no effect. On second thought, this might be a way to DOS a CO server.... Well, anyway, the client side can be modified and it might be worth someone changing the time values in the action packets unless someone knows for a fact that the time is handled server side when checking action times.