Any SWIFT EMULATOR FIXES? [SQL]

[master99]

I'm sick to death of getting my hotel.users deleted!! It pisses me of real bad.... Can you please... tell me any swift emulator SQL fixes? Please??

AND!? How do I translate the commands on swift emulator?

[MentaL]

[Superfun]

Who says its becouse of swift, maybe somebody is using a website exploit.

(look in your log, use different users for emu and web to indentify the origin)

[The General]

There is an exploit in the navigator when you search for room -> owner: 'Inject Here'

Who says its becouse of swift, maybe somebody is using a website exploit.

(look in your log, use different users for emu and web to indentify the origin)

Because he probably already checked his site?

[master99]

I don't think ubercms has exploits....


Thanks HillBilly I'll give it a go fixing it....

[master99]

My bad, UBERCMS has a few exploits.... but not many.... Easy fix...... Ethan galea.... I don't find that help.... I'd probably class that as spam.... :l

[TriDev]

My bad, UBERCMS has a few exploits.... but not many.... Easy fix...... Ethan galea.... I don't find that help.... I'd probably class that as spam.... :l

Just be careful owning a retro, have you even checked if you have received a DMCA?

[master99]

Yes, Everyday ;)

[Gaby]

I'll give you the fix for the owner: exploit.
Go to butterfly > habbohotel> navigators > navigator
Search for:

internal ServerMessage SerializeSearchResults(string SearchQuery)

Change to:

internal ServerMessage SerializeSearchResults(string SearchQuery)
        {
            string ProtectedSearch = ButterflyEnvironment.FilterInjectionChars(SearchQuery);
            if (ProtectedSearch.Contains("INSERT") || ProtectedSearch.Contains("DELETE") || ProtectedSearch.Contains("TRUNCATE") || ProtectedSearch.Contains(";"))
            {
                ProtectedSearch = "";
                SearchQuery = "";
            }
            DataTable table = new DataTable();
            using (IQueryAdapter adapter = ButterflyEnvironment.GetDatabaseManager().getQueryreactor())
            {
                if (SearchQuery.Length > 0)
                {
                    if (SearchQuery.StartsWith("owner:"))
                    {
                        adapter.setQuery("SELECT * FROM rooms WHERE owner LIKE @owner ORDER BY id DESC LIMIT 50");
                    }
                    else if (adapter.dbType == DatabaseType.MySQL)
                    {
                        adapter.setQuery("SELECT rooms.*, room_active.active_users FROM rooms LEFT JOIN room_active ON (room_active.roomid = rooms.id) WHERE owner = @query AND roomtype = 'private' UNION ALL SELECT rooms.*, room_active.active_users FROM rooms LEFT JOIN room_active ON (room_active.roomid = rooms.id) WHERE caption = @query AND roomtype = 'private' ORDER BY active_users DESC LIMIT 50");
                    }
                    else
                    {
                        adapter.setQuery("SELECT TOP 50 rooms.*, room_active.active_users FROM rooms LEFT JOIN room_active ON (room_active.roomid = rooms.id) WHERE owner = @query AND roomtype = 'private' UNION ALL SELECT rooms.*, room_active.active_users FROM rooms LEFT JOIN room_active ON (room_active.roomid = rooms.id) WHERE caption = @query AND roomtype = 'private' ORDER BY active_users DESC");
                    }
                    adapter.addParameter("query", ProtectedSearch);
                    adapter.addParameter("owner", ProtectedSearch.Replace("owner:", ""));
                    table = adapter.getTable();
                }
            }
            List<RoomData> list = new List<RoomData>();
            if (table != null)
            {
                foreach (DataRow row in table.Rows)
                {
                    RoomData item = ButterflyEnvironment.GetGame().GetRoomManager().FetchRoomData(Convert.ToUInt32(row["id"]), row);
                    list.Add(item);
                }
            }
            ServerMessage message = new ServerMessage(Outgoing.NavigatorPacket);
            message.AppendInt32(8);
            message.AppendString(SearchQuery);
            message.AppendInt32(list.Count);
            foreach (RoomData data2 in list)
            {
                data2.Serialize(message, false);
            }
            message.AppendBoolean(false);
            return message;
        }

[master99]

thanks so much!

[Gaby]

thanks so much!

You're welcome ;)