SQL Inject fix

Page 1 of 2 12 LastLast
Results 1 to 15 of 27
  1. #1
    Daemonsring Developer Gunblade is offline
    MemberRank
    Jul 2007 Join Date
    On the moonLocation
    728Posts

    SQL Inject fix

    Removed
    Last edited by Gunblade; 14-06-13 at 10:13 PM.


  2. #2
    Developer / Patch Finder Tankado is offline
    MemberRank
    Oct 2011 Join Date
    The NetherlandsLocation
    451Posts

    Re: SQL Inject fix

    ty, this help full,

    i'm add this right now !!

  3. #3
    Fuck Army. sahar042 is offline
    MemberRank
    Jul 2009 Join Date
    833Posts

    Re: SQL Inject fix

    No... This is not the only way to do it i have alot of more places i patched it on my server.
    And you need to do it here:
    void MMatchServer::OnRequestDeleteChar(const MUID& uidPlayer, const int nCharIndex, const char* szCharName)

  4. #4
    Daemonsring Developer Gunblade is offline
    MemberRank
    Jul 2007 Join Date
    On the moonLocation
    728Posts

    Re: SQL Inject fix

    Quote Originally Posted by sahar042 View Post
    No... This is not the only way to do it i have alot of more places i patched it on my server.
    And you need to do it here:
    void MMatchServer::OnRequestDeleteChar(const MUID& uidPlayer, const int nCharIndex, const char* szCharName)
    You don't have to patch it there.

  5. #5
    Fuck Army. sahar042 is offline
    MemberRank
    Jul 2009 Join Date
    833Posts

    Re: SQL Inject fix

    Quote Originally Posted by Gunblade View Post
    You don't have to patch it there.
    I did it in this place and it's working for me (I checked it).

  6. #6
    Daemonsring Developer Gunblade is offline
    MemberRank
    Jul 2007 Join Date
    On the moonLocation
    728Posts

    Re: SQL Inject fix

    Quote Originally Posted by sahar042 View Post
    I did it in this place and it's working for me (I checked it).
    I'm not even going to argue with you, have a nice day sir.

  7. #7
    Fuck Army. sahar042 is offline
    MemberRank
    Jul 2009 Join Date
    833Posts

    Re: SQL Inject fix

    Quote Originally Posted by Gunblade View Post
    I'm not even going to argue with you, have a nice day sir.
    Oh right i checked it it's better to do it on this place, i will replace all the places i patched to this one thank you sir. And i gave it to Max this exploit to block it and have more then 1.
    Last edited by sahar042; 22-12-12 at 08:52 PM.

  8. #8
    Yaaay! Tannous is offline
    MemberRank
    Jul 2012 Join Date
    KonohaLocation
    840Posts

    Re: SQL Inject fix

    I've seen that both sides works xD !

  9. #9
    Account Upgraded | Title Enabled! Wish Q is offline
    MemberRank
    Jul 2012 Join Date
    LiveScoreLocation
    456Posts

    Re: SQL Inject fix

    thanks gunblade u are the best!

  10. #10
    Praise the Sun! Solaire is offline
    MemberRank
    Dec 2007 Join Date
    Undead BurgLocation
    2,862Posts

    Re: SQL Inject fix

    Checking for ' only would suffice. Also, deleteclan, createcharacter, etc.

  11. #11
    Account Upgraded | Title Enabled! Wish Q is offline
    MemberRank
    Jul 2012 Join Date
    LiveScoreLocation
    456Posts

    Re: SQL Inject fix

    why are there so many exploits in MMatchDBMgr?

  12. #12
    Yaaay! Tannous is offline
    MemberRank
    Jul 2012 Join Date
    KonohaLocation
    840Posts

    Re: SQL Inject fix

    Quote Originally Posted by Wizkidje View Post
    Checking for ' only would suffice. Also, deleteclan, createcharacter, etc.
    Is it possible to inject using Create Clan xD ... I've never tried this O.o

  13. #13
    Enthusiast isaias008 is offline
    MemberRank
    May 2011 Join Date
    37Posts

    Re: SQL Inject fix

    Quote Originally Posted by Wizkidje View Post
    Checking for ' only would suffice. Also, deleteclan, createcharacter, etc.
    and to patch Create Clan and Deleteclan sql inject fix patch have?
    ( GunZ July 21 2008)

  14. #14
    Wait wut PenguinGuy is offline
    MemberRank
    Apr 2010 Join Date
    United StatesLocation
    765Posts

    Re: SQL Inject fix

    Quote Originally Posted by sahar042 View Post
    Oh right i checked it it's better to do it on this place, i will replace all the places i patched to this one thank you sir. And i gave it to Max this exploit to block it and have more then 1.
    To finish what Gunblade was going to say:
    It honestly doesn't matter, as long as it doesn't execute the query. Putting it in OnRequestDeleteChar is a bit more effecient, since it doesn't have to go through everything up till the function that executes the query. But other than that, no difference.
    (Hint, there's like 2(??) functions that get called to execute a query. Fix it in them.) --Edit, I may be thinking of a different game. If I'm mistaken, excuse this.

    I'm still baffled why you all are still messing with GunZ. You have RealSpace 1 & 2, Mint, RealSound (and FMOD) and CML, why doesn't everyone just work together on a new GunZ-style game? Lol, couldn't even finish that without laughing.

  15. #15
    Praise the Sun! Solaire is offline
    MemberRank
    Dec 2007 Join Date
    Undead BurgLocation
    2,862Posts

    Re: SQL Inject fix

    Quote Originally Posted by PenguinGuy View Post
    You have RealSpace 1 & 2, Mint, RealSound (and FMOD) and CML, why doesn't everyone just work together on a new GunZ-style game?
    Oh, the irony.



Page 1 of 2 12 LastLast

Advertisement