Need a little help.

[Jerzkie]

My server is being bullied by a player, He is generating world server crashes idk how but when i see the world server it stopped responding and you need to close the program. Also he is able to create a game master account / character inside the game. anyone knows how to fix my problem?? :(


Im sorry for my bad english..

[MentaL]

[n0tso1ee7]

Not trying to sound like I have any real idea trust me I'm pretty stupid when it comes to
this sort of thing however from what I recall the only real way to create a GM account is
by using the database, is there any $_POST or pages they might be able to send injections
into, are you blocking the ability to send any not so arbitrary code to your database?
A really crap example of what I mean, ( preg_match( "/[^a-zA-Z0-9]/", $pusername))
If you don't think you have something like this I recall reading awhile back Mooti had a simple script
you could add to block this sort of thing awhile back....? Don't quote me on that.....

This might not even be of any help to you just throwing my thoughts out there.

[John09]

Backdoored File :))

[n0tso1ee7]

John09 might be right in your case, I took a gander at your site looks okay-ish from what I can tell but I'm no expert I know someone who could send injections through the vote system awhile back...
but at the same time I would assume you'd have checked through your source or started from a clean-ish V15 I couldn't give you any real idea where or how backdoors are in your source unless you just copy and pasted them in.

[Fur Zi]

Infiltration, you can see fixes in the release section.

[Jerzkie]

Thank you all for your replies, i really appreciate it :)

I looked on to my source and something bothered me. I guess packet editors works on my server :).

Im not sure also but i guess the crc part is the problem. Im not pro on this sort of things but i'm willing to learn :) Thanks again

- - - Updated - - -

Stat hack also works.

I wonder if packet editors are able to to do this

Make your accnt an administrator, Crash the world server, spawn monsters, spawn items and dc people around you.