Register for your free account! | Forgot your password?

You last visited: Today at 14:25

  • Please register to post and access all features, it's quick, easy and FREE!


[SQL] Avatar MagicOpt Exploit Fix

Discussion on [SQL] Avatar MagicOpt Exploit Fix within the SRO PServer Guides & Releases forum part of the SRO PServer - Discussions / Questions category.

Reply
 
Old   #1

 
elite*gold: 151
Join Date: Mar 2011
Posts: 1,551
Received Thanks: 953
[SQL] Avatar MagicOpt Exploit Fix

Hey,

It has been a while since i released something, however. This query will fix the issue with avatars. Though it's easy to fix it on filters.

Alright, just use the query.

It's your choice to use it or not. (Take a backup first in case something went wrong)

Code:
USE SRO_VT_SHARD

CREATE TABLE #MagOpt (
	MagicOptValue BIGINT
)

SET NOCOUNT ON

/* ######## Inserting the Magic Opt Values ######## */
INSERT INTO #MagOpt VALUES (4294967542)
INSERT INTO #MagOpt VALUES (4294967660)
INSERT INTO #MagOpt VALUES (4294967661)
INSERT INTO #MagOpt VALUES (4294967662)
INSERT INTO #MagOpt VALUES (4294967543)
INSERT INTO #MagOpt VALUES (4294967663)
INSERT INTO #MagOpt VALUES (4294967664)
INSERT INTO #MagOpt VALUES (4294967665)
INSERT INTO #MagOpt VALUES (4294967669)
INSERT INTO #MagOpt VALUES (4294967670)
INSERT INTO #MagOpt VALUES (4294967671)
INSERT INTO #MagOpt VALUES (4294967672)
INSERT INTO #MagOpt VALUES (4294967550)
INSERT INTO #MagOpt VALUES (4294967666)
INSERT INTO #MagOpt VALUES (4294967667)
INSERT INTO #MagOpt VALUES (4294967668)
INSERT INTO #MagOpt VALUES (21474836728)
INSERT INTO #MagOpt VALUES (644245094650)
INSERT INTO #MagOpt VALUES (21474836732)
INSERT INTO #MagOpt VALUES (107374182655)
INSERT INTO #MagOpt VALUES (4294967542)
INSERT INTO #MagOpt VALUES (4294967543)
INSERT INTO #MagOpt VALUES (21474836729)
INSERT INTO #MagOpt VALUES (644245094651)
INSERT INTO #MagOpt VALUES (21474836733)
INSERT INTO #MagOpt VALUES (107374182656)
INSERT INTO #MagOpt VALUES (21474836728)
INSERT INTO #MagOpt VALUES (107374182655)

SET NOCOUNT OFF

DECLARE @i TINYINT = 1;

WHILE @i != 5
BEGIN
	DECLARE @Query VARCHAR(MAX) =  'UPDATE I 
									SET I.ItemID = 0
									FROM SRO_VT_SHARD.._Inventory I
									JOIN SRO_VT_SHARD.._Items IT
									ON I.ItemID = IT.ID64
									WHERE IT.RefItemID IN (SELECT ID FROM SRO_VT_SHARD.._RefObjCommon WHERE TypeID1 = 3 AND TypeID2 = 1 AND TypeID3 = 13 AND TypeID4 in (1,2,3) AND Country = 3)
									AND IT.MagParam' + cast(@i as varchar(5)) +  ' NOT IN (SELECT MagicOptValue FROM #MagOpt) AND IT.MagParam' + cast(@i as varchar(5)) + ' 
									IS NOT NULL AND IT.MagParam' + cast(@i as varchar(5)) + ' != 0'

	EXEC (@Query)

	PRINT 'User Inventory [' + cast(@i as varchar(5)) + '] Cleared!'

	SET @Query =   'UPDATE I 
					SET I.ItemID = 0
					FROM SRO_VT_SHARD.._InventoryForAvatar I
					JOIN SRO_VT_SHARD.._Items IT
					ON I.ItemID = IT.ID64
					WHERE IT.RefItemID IN (SELECT ID FROM SRO_VT_SHARD.._RefObjCommon WHERE TypeID1 = 3 AND TypeID2 = 1 AND TypeID3 = 13 AND TypeID4 in (1,2,3) AND Country = 3)
					AND IT.MagParam' + cast(@i as varchar(5)) + ' NOT IN (SELECT MagicOptValue FROM #MagOpt) AND IT.MagParam' + cast(@i as varchar(5)) + ' 
					IS NOT NULL AND IT.MagParam' + cast(@i as varchar(5)) + ' != 0'

	EXEC (@Query)

	PRINT 'Avatar Inventory [' + cast(@i as varchar(5)) + '] Cleared!'

	SET @Query =   'UPDATE I 
					SET I.ItemID = NULL
					FROM SRO_VT_SHARD.._Chest I
					JOIN SRO_VT_SHARD.._Items IT
					ON I.ItemID = IT.ID64
					WHERE IT.RefItemID IN (SELECT ID FROM SRO_VT_SHARD.._RefObjCommon WHERE TypeID1 = 3 AND TypeID2 = 1 AND TypeID3 = 13 AND TypeID4 in (1,2,3) AND Country = 3)
					AND IT.MagParam' + cast(@i as varchar(5)) + ' NOT IN (SELECT MagicOptValue FROM #MagOpt) AND IT.MagParam' + cast(@i as varchar(5)) + '
					 IS NOT NULL AND IT.MagParam' + cast(@i as varchar(5)) + ' != 0'

	EXEC (@Query)

	PRINT 'Storage [' + cast(@i as varchar(5)) + '] Cleared!'

	SET @i += 1;
END

DROP TABLE #MagOpt
And that's it.
Thank you.



Locklyon is offline  
Thanks
4 Users
Old 02/10/2016, 23:55   #2
 
elite*gold: 0
Join Date: Apr 2015
Posts: 1,444
Received Thanks: 1,359
The problem with this as all SQL fixes is that the player needs to Teleport before the item is removed. Meaning if you are running a server with free avatars and so on, it can still be exploited and used to get lucky increased on alchemy.

Maybe this is working, however. It's not really perfect for all servers.

Not here to start a fight, but Filter is probably the best fix for this.


​Goofie​ is offline  
Thanks
2 Users
Old 02/11/2016, 00:37   #3
 
elite*gold: 0
Join Date: Dec 2015
Posts: 32
Received Thanks: 6
Quote:
Originally Posted by ​Goofie​ View Post
The problem with this as all SQL fixes is that the player needs to Teleport before the item is removed. Meaning if you are running a server with free avatars and so on, it can still be exploited and used to get lucky increased on alchemy.

Maybe this is working, however. It's not really perfect for all servers.

Not here to start a fight, but Filter is probably the best fix for this.
i think so ,too
Dev Xan is offline  
Old 02/11/2016, 00:52   #4

 
elite*gold: 151
Join Date: Mar 2011
Posts: 1,551
Received Thanks: 953
Quote:
Originally Posted by ​Goofie​ View Post
The problem with this as all SQL fixes is that the player needs to Teleport before the item is removed. Meaning if you are running a server with free avatars and so on, it can still be exploited and used to get lucky increased on alchemy.

Maybe this is working, however. It's not really perfect for all servers.

Not here to start a fight, but Filter is probably the best fix for this.
It's a alternative solution for those who do not have filters, or if their filter doesn't have it fixed yet. People have abused it already, it would be better to run such a thing first to clean the mess.


Locklyon is offline  
Old 02/11/2016, 01:17   #5
 
elite*gold: 0
Join Date: May 2010
Posts: 566
Received Thanks: 156
Thanks bro
this will help

Quote:
Msg 208, Level 16, State 1, Procedure _MagicOptBugFix, Line 4
Invalid object name 'Wolf.._AllowedMagicOpts'.
bro about this error

i'm just changed wolf to "SRO_VT_SHARD"
and work
--

(0 row(s) affected)

(405456 row(s) affected)

(2774 row(s) affected)

(185 row(s) affected)
xxnukertube is offline  
Old 02/11/2016, 01:34   #6
 
elite*gold: 0
Join Date: May 2010
Posts: 566
Received Thanks: 156

and now all sets from the server deleted lol ^^
Attached Images
File Type: jpg 32.jpg (108.2 KB, 970 views)
xxnukertube is offline  
Old 02/11/2016, 01:40   #7

 
elite*gold: 151
Join Date: Mar 2011
Posts: 1,551
Received Thanks: 953
Quote:
Originally Posted by xxnukertube View Post

and now all sets from the server deleted lol ^^
Wut ;o
I just used it on my test server with many avatars and it worked just fine, it didn't delete avatars with original magic opt values. others were removed. Make sure u inserted the lines
Locklyon is offline  
Old 02/11/2016, 01:43   #8
 
elite*gold: 0
Join Date: May 2013
Posts: 10
Received Thanks: 0
and ?!
LetsSro is offline  
Old 02/11/2016, 01:45   #9

 
elite*gold: 151
Join Date: Mar 2011
Posts: 1,551
Received Thanks: 953
Quote:
Originally Posted by LetsSro View Post
and ?!
And?
Locklyon is offline  
Old 02/11/2016, 03:08   #10
 
elite*gold: 0
Join Date: Apr 2015
Posts: 1,444
Received Thanks: 1,359
Quote:
Originally Posted by xxnukertube View Post

and now all sets from the server deleted lol ^^
Quote:
Originally Posted by Skipper* View Post
Wut ;o
I just used it on my test server with many avatars and it worked just fine, it didn't delete avatars with original magic opt values. others were removed. Make sure u inserted the lines
It removes sets because sets also can have blues.

By the way,
Ace coding strikes again!
​Goofie​ is offline  
Thanks
2 Users
Old 02/11/2016, 03:19   #11
 
elite*gold: 0
Join Date: May 2010
Posts: 566
Received Thanks: 156
my luck I'd just back up. nearly bankrupted my server
xxnukertube is offline  
Old 02/11/2016, 04:27   #12
 
elite*gold: 56
Join Date: Mar 2010
Posts: 313
Received Thanks: 54
good job
khaleed2010 is offline  
Old 02/11/2016, 06:46   #13

 
elite*gold: 151
Join Date: Mar 2011
Posts: 1,551
Received Thanks: 953
Quote:
Originally Posted by ​Goofie​ View Post
It removes sets because sets also can have blues.

By the way,
Ace coding strikes again!
Have u even tested it? If everyone believed an idiot, this would be the world's end.
Alright, updated it again. By the logic, it should have worked well. But something was wrong, I had to test again on my test server. It's working fine now.
Locklyon is offline  
Old 02/11/2016, 06:48   #14
 
elite*gold: 0
Join Date: Apr 2015
Posts: 1,444
Received Thanks: 1,359
Quote:
Originally Posted by Skipper* View Post
Have u even tested it? If everyone believed an idiot, this would be the world's end.
I learned the hard way that sometimes "idiots" or whatever you refer them to is sometimes right. Even if I wanted to almighty and say "Oh its your problem, I always make sure that there is not something wrong in my program or query etc."

So you should listen to everyone before setting your mind.
​Goofie​ is offline  
Old 02/11/2016, 08:20   #15
 
elite*gold: 0
Join Date: Apr 2015
Posts: 1,444
Received Thanks: 1,359
Quote:
Originally Posted by hazemooking View Post
and you should stop messing with people's servers
I did that a long time ago, as you see I'm not involved in the advertisement section any more.


​Goofie​ is offline  
Reply



« Silkroad Open Beta Map Files | Database + Client With Accounts ProSro »

Similar Threads
[Exploits] In-game MagicOpt Hack
11/01/2018 - SRO PServer Guides & Releases - 12 Replies
Yoo, I've found this hack sometime ago BUT since it's lame, I decided to share it. Sadly, the only way to fix this it processing the incoming requests and comparing them to a list. First, I'll explain how it works then how you (a server manager can fix this). What does it do? Simply, you add different MagicOptions to avatars, yes options that are not in the normal NPC list. http://i.imgur.com/iaOmEIw.png Yes, that's it, of course there are other magic opts that work, just try them...
[Release] invincible , Avatar MagOpt Exploit
08/04/2018 - SRO PServer Guides & Releases - 44 Replies
Credits : @Exo : For Avatar MagOpt Exploit . @pushedx : For Proxy. @androw3349 : mention the packet Opcode. Wont Explain anything just watch video video: https://www.youtube.com/watch?v=_MF7Bdi5nwg
Looking 15d MagicOpt table
11/21/2013 - SRO PServer Ask the Experts - 0 Replies
my server 130 cap max 15d but 15d stone not fulse.. i'm looking 15d magicopt table thanks



All times are GMT +1. The time now is 14:25.


Powered by vBulletin®
Copyright ©2000 - 2019, Jelsoft Enterprises Ltd.
SEO by vBSEO ©2011, Crawlability, Inc.

Support | Contact Us | FAQ | Advertising | Privacy Policy | Terms of Service | Abuse
Copyright ©2019 elitepvpers All Rights Reserved.