Temp WPE Pro Patch

[Bow]

Hey,

I've noticed that you can use WPE Pro packet editor to script catalogue's on hotels using Phoenix emulator. I don't know how it's done, but it has been done on a friend of mines hotel. You can also use it to script the clothes to alternate colors to change quickly.

This is a temporary fix, and not the best way to do it. But, it works until you figure out the real way. This disables Opera browser from using your client. So if people use it, then they're out of luck and have to find another browser. The scripting is done through Opera.

Add this to client.php (RevCMS) and either client.tpl or client.php in Uber (I don't use Uber):

<?php
	$check = $_SERVER["HTTP_USER_AGENT"];
	if(strpos($check, "Opera") !== false) {
        die("You cannot use this browser on Your Hotel. Please download and use 
<a href='http://google.com/chrome'>Google Chrome</a> for a faster, better experience.");
	}
?>

Go ahead and flame me, whatever. If you know the real way to patch these, then share please!

Credits:
Jonteh - 100%

[MentaL]

[Bloodraven]

user agent can be changed on most browsers unfortunately.

And this exploit is only on Phoenix?

[Delici0us]

Security by obscurity is not security.

All you’re doing is delaying someone, not preventing it entirely.

[BurakDev]

100% Useless, you can use WPE PRO with all navigators ..

Just enable winsock 2.0 and select first chrome.exe in target

[Bow]

user agent can be changed on most browsers unfortunately.

And this exploit is only on Phoenix?

As far as I'm aware, yes.

[Bloodraven]

I'm surprised that it wasn't patched during Phoenix's long history of renames.

[Bow]

I'm surprised that it wasn't patched during Phoenix's long history of renames.

I'd be surprised if someone actually does patch it.

I feel more flaming coming later.. lolol

[vLife]

Craig (Sledmore) patched it a while back when he use to have his RP. Though I do not remember how to do it myself. So it may be best if you ask him.

[The General]

I think you just gave away another way to fuck someones hold up.

[bugme]

This is pretty useless because not everyone is used to using Google Chrome and some of them don't even want to so now your forcing people to download chrome well that's pretty sad.

You should just ask Craig for this patch so people are able to use whatever browser they want but not being able to script using WPE.

You can also script via Firefox lol.

Verstuurd van mijn GT-I9070 met Tapatalk

[Leon]

This is one of the reasons why encryption is important.

[Hejula]

This is pretty useless because not everyone is used to using Google Chrome and some of them don't even want to so now your forcing people to download chrome well that's pretty sad.

You should just ask Craig for this patch so people are able to use whatever browser they want but not being able to script using WPE.

You can also script via Firefox lol.

Verstuurd van mijn GT-I9070 met Tapatalk

Chrome isn't the only browser available you know.

[bugme]

Chrome isn't the only browser available you know.

Yeah true but i like to get on Opera because that one is really fast.

[Eronisch]

I've contacted sledmore about this, hopefully we will get a response soon.

[Bow]

I've contacted sledmore about this, hopefully we will get a response soon.

Thanks, hopefully you directed him here for this.

[TheOleg]

This is one of the reasons why encryption is important.

Or you could just make secure server.

[Eronisch]

Didn't receive a response from sledmore yet, i think we are on our own..

[Keyuko]

Blocking Opera? Oh god dude...

Start WPE Pro, open the catalogue, log some pages.
Edit the offset and hope that the guys use min_rank 1 in the staffpage.

If you use a higher default user rank then you are protected.

[bugme]

Actually most catalogues are protected but i have recently been able to get in to staff page using WPE pro and it was actually very basic i my opinion and wasn't much fun.

Verstuurd van mijn GT-I9070 met Tapatalk

[Bloodraven]

I hate to be the script-kiddie but it's easier than I thought to get access to that staff page.

[Matata]

I still don't get how you're doing it.
#retard.

[bugme]

On Dox Hotel you can use the WPE to send presents and it doesn't even mute you or what not so basically what you can do is you can send so many presents that you will lagg and then disconnect.

They never patched it I've told the owner many times but he doesn't really care.

[Matata]

I would still love to know how people change the catalogue page.
Because I tried to log a few pages and I don't know which numbers I should change and what I should change them to.

Quite confusing.

[bugme]

There was a tutorial on Youtube how to get in to the staff page but that's only if able for normal users to see or not to see but not to get on.

There is this value you need to change in the packet to get there.

Verstuurd van mijn GT-I9070 met Tapatalk

[Matata]

There was a tutorial on Youtube how to get in to the staff page but that's only if able for normal users to see or not to see but not to get on.

There is this value you need to change in the packet to get there.

Verstuurd van mijn GT-I9070 met Tapatalk

I am aware of all that, but I don't know which value.