I have search something about protect my server from "deepweb" hack. DeepWeb is a program that allow to inject in shaiya database, i think I did all what i can for protect my server, i tryed some hacks that i have found and they don't work on my server and I was Ok, now after months that my server is open, I have found some strings in my log action in the server that i have never see..
i have edit the name of the account in "UserID" and the name of the toon in "CharID"
PS_DBAGENT__charsave.log:
--<begin>2014-03-05 10:14:28,"UserID",56,"CharID",26
{?=call usp_Save_Char_Info_E(26,60, 0,1, 7,13,9,430,12,200, 14200,7166,1190, 1,358, 86579506,89217669, 1.#QNAN0,9.829485,1.#QNAN0, 0,200,0,0,0, 1182,199,18,17)}
EXEC usp_Save_User_StoredMoney_E 1,56,0
{?=call Usp_Save_Char_Item_Del_E(26,'4092259863424466944,4 091780184296980480,4091267872008044544')}
{?=call Usp_Save_Char_Item_Del_E(26,'4092262960095887360', 0)}
{?=call Usp_Save_Char_Item_Add_E(26,4092262960095887360, 1,7, 27026,27,26, 20, 0,0,0,0,0,0,'', 1, '2014-03-05 10:13:59', 'D')}
{?=call Usp_Save_Char_Item_Del_E(26,'4092262998750593024', 0)}
{?=call Usp_Save_Char_Item_Add_E(26,4092262998750593024, 1,8, 25093,25,93, 0, 0,0,0,0,0,0,'', 1, '2014-03-05 10:14:04', 'D')}
PS_DBAGENT__system.log:
2014-03-05 10:13:18 err=-1, [Microsoft][ODBC SQL Server Driver]Invalid character value for cast specification, SQL STATE: 22018, NATIVE ERROR: 0 (0x0)
2014-03-05 10:13:18 ::SaveCharacter 26 "CharID" ret=1, qerr=-1, {?=call usp_Save_Char_Info_E(26,60, 0,1, 7,13,9,430,12,200, 14200,7166,1190, 1,358, 86579506,89217199, 1.#QNAN0,9.829485,1.#QNAN0, 0,200,0,0,0, 1182,199,18,17, 4,2)}
After a bit of torture he have say me that have use this program, "deepweb" and that isn't easy to use.. sure I can find who use this hack and bann looking my logs every day, but I find better to find a way to protect the database from it.. I don't know what can be do with this program, if anyone know something about please help me.
Can be that your server can be hack whit this program to *attention*
ps: my server is secure from all the other hacks, no dupe and not other hack can function






