[RELEASE]PS_LOGIN WITHOUT EXPLOITS

[hronolight]

Hi all.

Recently, some devs have encountered a new exploit, related to the connections count to ps_login

As a result, no one could connect to the server and received Error 0


This ps_login contains fixes off all known exploits at the moment:

1. SQL Injection fix from JujiPoly
2. Handshake fix by Anton1312
3. Connection overflow (Error 0) fix from me

Have fun!

[Sasori12]

[Brownback]

Good release

[trysten]

In the client part it presents this error after uses seur file
[client is not compatible]

[perlisson]

in login use command : /vchkoff

[ShaiyaIwanttolearn]

just take my doubts, I am not here to accuse anyone, because if this dll, tries all explorations corrected, this is a great help for shaiya community.

many informed that they are using this new ps_login

Comunicado a Developers y comunidad "Shaiya"

Últimamente han habido intentos de perjudicar a servidores Shaiya tratando de hackear cuentas de usuarios de diferentes servidores. Esto se debe a que han hackeado base de datos con gran cantidad de usuarios de otros servidores con lo que aprovechan esta información para perjudicar cuentas de los diferentes servidores existentes.

Como ReMasterGames los servidores que están bajo nuestro soporte estos no han sido vulnerados pero si han entrado a sus cuentas con estos datos. Por ello *ES DE VITAL IMPORTANCIA* que los usuarios de cada servidor siempre cambien sus contraseñas y jamas ocupar las mismas en todos los juegos.

Para la comunidad Developers y administrador de servidores recomendamos tener política de backup diarios, proteger conexión a base de datos por bloqueo de IP externa. analizar constantemente sus maquinas en busca de malwares o backdoor

Adjuntamos ultima actualización de PS_Login.exe segura para evitar inyecciones de PS Login a sus base de datos.

[Призрак урана]

I correctly understood that you removed check for the number of open sockets? If so, how will your fix behave after exceeding the number of available sockets?

[hronolight]

Yes, i just remove the checking.
Of course, this is not a complete solution. But, it seems to me, this can help (and as it was defined - it has already helped some people).
I'm not an expert on network technologies, but it seems to me that the full fix of this problem should not be in server files, but in ddos protection or firewall.

[Propice]

what did you actually changed? can you post the CE script of this fix?

[Comando0101]

Alguém tem a correção de duplicar item do shaiya 4.5?