server security

[nagato]

Guys I really need your help now.. Someone is hacking my server (EP4) which gives them indefinite amount of golds. Some players reported that they are using what they called moonlight engine. How is it possible? Dupe is already impossible in my server since the maximum stats is 30k only. I am already pissed off by this hacker and I really need to add security to prevent this from happening again. All dev with the same issue, please I really need your help.

Thank you in advance

[MentaL]

[Yui_Ichigo]

begging and please to all other victims give us info on how it is done !!
so we could see what prevention we can do !!

[weg123]

Its the same problem in here :) Hackers

[the_eliter]

bro negato, kindly double check this column design.

-ChaHP (make sure bigint)
-ChaSP (make sure bigint)
-ChaMP (make sure bigint)

moonlight engine is also same with cheatengine, and i guess it will not work
using moonlight engine,you can barely edit some values of money/stats/upgrade/defence etc at client side but it will not send and save to your database, and later on Game.exe will probably crash.

[Yui_Ichigo]

yup it is already in BigInt so no chances of Duplicating
And our Max Stats over all is just 30k so very impossible
The only thing the hacker do is raising a big amount of Gold..
not sure maybe just for now, maybe soon items or whatever Y_Y

[weg123]

lol for today hacker's raising there's reborn . ^_^

[hectic]

Guys I really need your help now.. Someone is hacking my server (EP4) which gives them indefinite amount of golds. Some players reported that they are using what they called moonlight engine. How is it possible? Dupe is already impossible in my server since the maximum stats is 30k only. I am already pissed off by this hacker and I really need to add security to prevent this from happening again. All dev with the same issue, please I really need your help.

Thank you in advance

try to check if your client can make a dual window log-in.
If yes, then they can open dual client using same account
with different character.

[nagato]

Thanks for all the help.

@the_eliter
bro those were already in bigint since day 1 >.<

@connected
-about the duel system bug, that's not working in our server
-about the maintenance, we a;ways click Stop to prevent data loss so that's not possible too. The hacker actually do the hack when the game is online and he can do it in just seconds.

@hectic
dual account log in is already disabled in our server since the very beginning >.<

[Yui_Ichigo]

@Hectic: can you tell more info about how they do it when dual login is enable ?

[Jolin88]

They don't need dual login to do dupe with 2 chars in 1 account

they just need 2 pcs

I tell you ep4 server the only way to really prevent duping is to make 1 char per account only

the other way is to upgrade to ep5

but even if you do that your server won't be hack safe, it's just the most common ways of duping in ep4 server

[Shinobi-X]

Sometimes it is not because of the hacking via the client side.. just wanna tell you to check your web for any bugs that can be exploited.. Just FYI, I don't trust 100% some web that is shared by people here.. it's best if you learn how to do your own secured web. You don't know what they may put in there.. huhu..

[nagato]

@jolin & all

I think the hacker is not using any duping method. I guess he's using some injector or hacking our CP to have an access to our database.

This hacker is already pissing me off.

[Shinobi-X]

@jolin & all

I think the hacker is not using any duping method. I guess he's using some injector or hacking our CP to have an access to our database.

This hacker is already pissing me off.

told ya XD, this thing happens to me years ago.. but mine is the reborn system bug..

[the_eliter]

Thanks for all the help.

@the_eliter
bro those were already in bigint since day 1 >.<
>.<

o ic bro, try to monitor all errors on your field and agent that will come out while they performing an illegal activities in game, if thers no error
move to second step,
turn off the control panel/website/webserver and monitor the game hacking status

[Connected]

They don't need dual login to do dupe with 2 chars in 1 account

they just need 2 pcs

I tell you ep4 server the only way to really prevent duping is to make 1 char per account only

the other way is to upgrade to ep5

but even if you do that your server won't be hack safe, it's just the most common ways of duping in ep4 server

agree with you mr.jolin

[Yui_Ichigo]

@all thanks everyone for infos, now we are on monitoring for any actions...

[hectic]

They don't need dual login to do dupe with 2 chars in 1 account
they just need 2 pcs
I tell you ep4 server the only way to really prevent duping is to make 1 char per account only
the other way is to upgrade to ep5
but even if you do that your server won't be hack safe, it's just the most common ways of duping in ep4 server

yup! Jolin88 also correct.

@Hectic: can you tell more info about how they do it when dual login is enable ?

Character "A" is online putting a gold into locker storage.
After putting up a gold, he/she open again another
character "B" of same account and get the gold putted before
by character "A". Then after that both character logged out.
Then when it open again, gold putted by character "A" still in his character.
So, both characters now have gold.
Doing this thing continuously can multiply their gold. ^^

[nagato]

@hectic

that is not possible bro in our server because if a player tries that, he will receive a message of "user account being connected"