Register for your free account! | Forgot your password?

Go Back   elitepvpers > Popular Games > Metin2 > Metin2 Private Server > Metin2 PServer Guides & Strategies
You last visited: Today at 23:25

  • Please register to post and access all features, it's quick, easy and FREE!

Advertisement



[FIX][C++] SQL Injection in Messenger and Guild

Discussion on [FIX][C++] SQL Injection in Messenger and Guild within the Metin2 PServer Guides & Strategies forum part of the Metin2 Private Server category.

Reply
 
Old 12/19/2015, 12:36   #46
 
elite*gold: 0
Join Date: Mar 2013
Posts: 54
Received Thanks: 6
Quote:
Originally Posted by naosou View Post
Code:
This difference file is created by IdaPro

game
002EB6F5: 01 00
Code:
This difference file is created by IdaPro

db
00082F15: 01 00
Can any one tell what this diff does? What this fix?
oceanusPT is offline  
Old 12/19/2015, 13:44   #47
 
naosou's Avatar
 
elite*gold: 0
Join Date: May 2013
Posts: 396
Received Thanks: 92
Quote:
Originally Posted by oceanusPT View Post
Can any one tell what this diff does? What this fix?
Did you read the topic?
You asked for a 34k diff to fix this issue, and there it is.
naosou is offline  
Old 12/19/2015, 14:00   #48
 
elite*gold: 0
Join Date: Oct 2012
Posts: 111
Received Thanks: 1
yes, what is diferent between 002EB6F5: 01 00 and
game_2089M
0010F5C3: 31 90
0010F5C4: C0 90
0010F5C5: 8B 90 .......


in game game_2089M is also 002EB6F5: 01

Thank you
xworldx is offline  
Old 12/19/2015, 15:06   #49
 
xP3NG3Rx's Avatar
 
elite*gold: 50
Join Date: May 2011
Posts: 270
Received Thanks: 991
Quote:
Originally Posted by xworldx View Post
yes, what is diferent between 002EB6F5: 01 00 and
game_2089M
0010F5C3: 31 90
0010F5C4: C0 90
0010F5C5: 8B 90 .......


in game game_2089M is also 002EB6F5: 01

Thank you
iMer's dif disable the removing friend function.

And the first dif is changed the libsql/AsyncSQL.cpp Connect function.
Code:
if ( mysql_real_connect(
	 v1,
	 *(char **)(a1 + 968),
	 *(_DWORD *)(a1 + 972),
	 *(_DWORD *)(a1 + 976),
	 *(_DWORD *)(a1 + 980),
	 *(_DWORD *)(a1 + 1000),
	 0,
	 65536))
With this:
Code:
if ( mysql_real_connect(
	 v1,
	 *(char **)(a1 + 968),
	 *(_DWORD *)(a1 + 972),
	 *(_DWORD *)(a1 + 976),
	 *(_DWORD *)(a1 + 980),
	 *(_DWORD *)(a1 + 1000),
	 0,
	 0))
xP3NG3Rx is offline  
Old 12/19/2015, 15:08   #50
 
elite*gold: 0
Join Date: Oct 2012
Posts: 111
Received Thanks: 1
Quote:
Originally Posted by xP3NG3Rx View Post
iMer's dif disable the removing friend function.

And the first dif is changed the libsql/AsyncSQL.cpp Connect function.
Code:
if ( mysql_real_connect(
	 v1,
	 *(char **)(a1 + 968),
	 *(_DWORD *)(a1 + 972),
	 *(_DWORD *)(a1 + 976),
	 *(_DWORD *)(a1 + 980),
	 *(_DWORD *)(a1 + 1000),
	 0,
	 65536))
With this:
Code:
if ( mysql_real_connect(
	 v1,
	 *(char **)(a1 + 968),
	 *(_DWORD *)(a1 + 972),
	 *(_DWORD *)(a1 + 976),
	 *(_DWORD *)(a1 + 980),
	 *(_DWORD *)(a1 + 1000),
	 0,
	 0))

Ok, and what is better solution ?

what is your new diff?
game_2089M
0010F5C3: 31 EB
0010F5C4: C0 09
xworldx is offline  
Old 12/19/2015, 16:35   #51
 
elite*gold: 0
Join Date: Mar 2013
Posts: 54
Received Thanks: 6
Quote:
Originally Posted by naosou View Post
Did you read the topic?
You asked for a 34k diff to fix this issue, and there it is.
maybe i ask wrong. i wanna know what de fix does. When i apply de diff, what will hapen?

i know this is a fix. But it will do what?
Players cant chat in guild?
this is what i ask... xD
oceanusPT is offline  
Old 12/19/2015, 16:53   #52
 
xP3NG3Rx's Avatar
 
elite*gold: 50
Join Date: May 2011
Posts: 270
Received Thanks: 991
Quote:
Originally Posted by xworldx View Post
Ok, and what is better solution ?

what is your new diff?
game_2089M
0010F5C3: 31 EB
0010F5C4: C0 09
Same as iMer's dif, just I did not NOP the function, I JMP-ed it, shorter.
xP3NG3Rx is offline  
Old 12/20/2015, 17:29   #53
 
elite*gold: 0
Join Date: Feb 2009
Posts: 312
Received Thanks: 29
please it is ok?
messenger


guild




compile is ok but is protect?
bluedrago is offline  
Old 12/21/2015, 21:15   #54
 
elite*gold: 0
Join Date: Nov 2012
Posts: 149
Received Thanks: 39
Brauch fix für Version: 40250
40k Serverfiles
als diff bitte
Walion is offline  
Old 12/21/2015, 22:02   #55

 
elite*gold: 0
Join Date: Dec 2008
Posts: 2,825
Received Thanks: 1,538
Quote:
Originally Posted by Walion View Post
Brauch fix für Version: 40250
40k Serverfiles
als diff bitte
Du solltest wenn du schon die 40250 hast die source benutzen und das selber fixxen.
.Colossus. is offline  
Old 12/21/2015, 23:03   #56
 
elite*gold: 0
Join Date: Nov 2012
Posts: 149
Received Thanks: 39
Wo bekomme ich den die source her ?
Walion is offline  
Old 12/22/2015, 09:36   #57
 
Mi4uric3's Avatar
 
elite*gold: 405
Join Date: Dec 2007
Posts: 6,615
Received Thanks: 6,358
Quote:
Originally Posted by Walion View Post
Wo bekomme ich den die source her ?
Mi4uric3 is offline  
Thanks
2 Users
Old 12/22/2015, 11:14   #58
 
elite*gold: 0
Join Date: Jun 2011
Posts: 4
Received Thanks: 0
Hello.
I don't have source for 40K.
I want diff for 40K.
Thanks!
hectoremarius is offline  
Old 12/22/2015, 20:02   #59

 
Aze /..'s Avatar
 
elite*gold: 220
Join Date: Oct 2011
Posts: 7,370
Received Thanks: 7,613
Quote:
Originally Posted by hectoremarius View Post
Hello.
I don't have source for 40K.
I want diff for 40K.
Thanks!
U using a 40k game and no source? How is that even possible?
Aze /.. is offline  
Old 12/22/2015, 21:47   #60
 
elite*gold: 0
Join Date: Nov 2012
Posts: 149
Received Thanks: 39
Leute giebs das als diff nicht ?
Walion is offline  
Reply


Similar Threads Similar Threads
Small Help needed to fix the icons on messenger/guild
08/08/2015 - Flyff Private Server - 2 Replies
Hello guys, i just need a little help or guide on how do i fix the icons for each job in the friend list or messenger list. cause my messenger looks like this : Messenger Icons Error i need to correct the icons same with the guild view Guild Icon Error wrong icons ... Thanks in advance
[B) What´s App Messenger
12/14/2012 - elite*gold Trading - 20 Replies
Hey Leute ich biete euch hiermit einen Code für den iTunes US Store an! Dieser Code beinhaltet den Download von dem What´s App Messenger! Sofortkauf 30 e*G! Ich wiederhole, dieser Code funktioniert nur auf dem US iTunes Store!
Messenger Bug ?
07/19/2012 - Combat Arms - 2 Replies
Leute bei Combat Arms geht der Messenger garnicht und mit dem Clan kann ich garnicht sprechen alle sind Offline ist das nur bei mir oder bei vielen ? Und wie bekommt mann das wieder zurück ?
Tcp Messenger
06/21/2010 - AutoIt - 8 Replies
Hi wieder mal ein Problem:rtfm: Möchte nun Von meinem Tcp,Client was zu meinem Tcp,Server senden eine Nahricht möchte diese aber nicht immer im code ändern habe dazu eine Inputbox gemacht möchte nun das der text der in der inputbox ist gesendet wird mein code sieht bisher so aus TCPStartup() $verbindung = TCPConnect("127.0.0.1", 4322) $message=Inputbox("Msg Transmitter","Bitte Gib deine Nahricht ein.") If $verbindung = -1 Then MsgBox(16, "Error", "Die Verbindung zum Server...



All times are GMT +1. The time now is 23:25.


Powered by vBulletin®
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
SEO by vBSEO ©2011, Crawlability, Inc.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Support | Contact Us | FAQ | Advertising | Privacy Policy | Terms of Service | Abuse
Copyright ©2025 elitepvpers All Rights Reserved.