Quote: Originally Posted by
allard100
Tank you! The fix works
EDIT:
I have this error:

I will look into it after I fix this possible security hole.
EDIT 2:
Did you empty your furniture table but not your furniture_moodlight table?
If so then that could be the problem... I can't see any other cause as it only runs that query when you buy a moodlight.
EDIT 1:
Ok here is the new code.
URGENT UPDATE
I recommend doing this ASAP as it has now been released and may be exploited.
Replace:
PHP Code:
case "C~": // Sound machine - burn song to disk
{
if (_isOwner && Room != null && Room.floorItemManager.soundMachineID > 0)
{
int songID = Encoding.decodeVL64(currentPacket.Substring(2));
Database dbClient = new Database(true, false, 123);
if (_Credits > 0 && dbClient.findsResult("SELECT id FROM soundmachine_songs WHERE id = '" + songID + "' AND userid = '" + userID + "' AND machineid = '" + Room.floorItemManager.soundMachineID + "'"))
{
DataRow dRow = dbClient.getRow("SELECT title, length FROM soundmachine_songs WHERE id = '" + songID + "'");
string Status = Encoding.encodeVL64(songID) + _Username + "\n" + DateTime.Today.