[Tutorial] Fix for Habboon DB (exploit)

[David Redziniak]

This isn't much an exploit, but it's something that should be configured and not left sitting there.
This is just an attempt to help the community using Sledmore's DB release.
So, what I've witnessed is that the catalog can be exploited into viewing staff catalog pages, this is because the rank is not properly configured in the database. Some pages in the staff catalog of the DB is on rank 1(user), which should be changed to the rank of the catalog, to prevent unauthorized access. Again, something that should be configured for the protection of your hotel. Thank you.

 

[The General]

This is common sense that every subpage should have the same rank set...

 

[DutchenL]

Not an exploit.

 

[Droppy]

That's not an exploit to be quite honest. I've moved it to the Tutorials subsection anyhow, for people whom doesn't know.

 

[Cankiee]

I understand what you have said, but how is someone even able to view pages that are under a catagory that is higher then his rank?
Impossible? Or can we see Habbo.com Staff catalog ?:junglejane: