FiX For Hack

[kinestetik]

.

[JohnHeatz]

My question is simple, is your server EP5.x?

If your answer is "Yes", go take a look at the index for development (in my signature is the link) there you will find the link in which it is explained how to fix this issue, as it isn't a hack per se it is a little exploit.

[kinestetik]

.

[JohnHeatz]

It is merely with a chat command, and not that I know about, it would just affect the account of the one using it, yet, remember that it can get spread around and people might use it, so if this has happened to different accounts, simply check on the logs on your database, because basically everything that is done in-game gets reflected as an "action" on the database....

[kinestetik]

.

[.Necrosis.]

If this happens again, and you know the chat trigger is removed, and remote ports are closed, begin checking any PHP scripts you may have on your site for injection vulnerability.

Btw, other than just adjusting the option for listening ports in the SQL Configuration Manager, I would also add restrictions to your firewall.

[kinestetik]

.

[Riouk]

Maybe you can test it making a normal account and just typing in normal chat 0777addgm
then relog and if you're not GM it's patched.