[Tutorial] Ban for Hardware ID

[Yuri-BR]

Tutorial for Hardware ID Ban by Yuri-BR

Solution RSUpdate > WOLoginHelper.cpp

Spoiler:

Search for:

#include "SteamHelper.h" 

Add:

#include "HWInfo.h" 

Search for:

SaveUserName(); 

Add:

LoadComputerToken(); 

Search for:

req.AddParam("password", passwd); 

Add:

req.AddParam("computerid", hardwareid); 

Search for:

bool CLoginHelper::LoadUserName()
{
    // query for game registry node
    HKEY hKey;
    int hr;
    hr = RegOpenKeyEx(HKEY_CURRENT_USER, 
        "Software\\Arktos Entertainment Group\\WarZ", 
        0, 
        KEY_ALL_ACCESS, 
        &hKey);
    if(hr != ERROR_SUCCESS)
        return true;

    DWORD size = sizeof(username);
    hr = RegQueryValueEx(hKey, "username", NULL, NULL, (BYTE*)username, &size);
    RegCloseKey(hKey);

    return true;
} 

Add:

bool CLoginHelper::LoadComputerToken(){
    HKEY hKey;
    int hr;
    hr = RegOpenKeyEx(HKEY_CURRENT_USER, 
        "Software\\House of Warrior Interactive\\WarZ", 
        0, 
        KEY_ALL_ACCESS, 
        &hKey);
    if(hr != ERROR_SUCCESS)
    {
        CreateComputerToken();
        return true;
    }

    DWORD size = sizeof(hardwareid);
    hr = RegQueryValueEx(hKey, "hardwareid", NULL, NULL, (BYTE*)hardwareid, &size);
    RegCloseKey(hKey);

    return true;
}

void CLoginHelper::CreateComputerToken()
{
    HKEY hKey;
    int hr;
    hr = RegCreateKeyEx(HKEY_CURRENT_USER, 
        "Software\\House of Warrior Interactive\\WarZ", 
        0, 
        NULL,
        REG_OPTION_NON_VOLATILE, 
        KEY_ALL_ACCESS,
        NULL,
        &hKey,
        NULL);
    if(hr == ERROR_SUCCESS)
    {
        CHWInfo g_HardwareInfo;
        g_HardwareInfo.Grab();
        sprintf(hardwareid, "0x%I64x", g_HardwareInfo.uniqueId); // Hardware ID By Yuri-BR

        DWORD size = strlen(hardwareid) + 1;

        hr = RegSetValueEx(hKey, "hardwareid", NULL, REG_SZ, (BYTE*)hardwareid, size);
        RegCloseKey(hKey);
    }
} 

WOLoginHelper.h

Spoiler:

Search for:

char        passwd[128]; 

Add:

char        hardwareid[50]; 

Search for:

bool        LoadUserName(); 

Add:

bool        LoadComputerToken();
void        CreateComputerToken(); 

Solution WZBackend-ASP.NET > api_login.aspx.cs

Spoiler:

Search for:

string password = web.Param("password"); 

Add:

string computerid = web.Param("computerid"); 

Search for:

sqcmd.Parameters.AddWithValue("@in_Password", password); 

Add:

sqcmd.Parameters.AddWithValue("@in_HardwareID", computerid); 

SQL Server 2008 > Run this script in the database

Spoiler:

HWID_Log

USE [WarZ]
GO
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
CREATE TABLE [dbo].[HWID_Log](
[id] [int] IDENTITY(1,1) NOT NULL,
[CustomerID] [int] NOT NULL,
[ip] [nvarchar](50) NOT NULL,
[HardwareID] [nvarchar](50) NOT NULL,
[time] [datetime] NOT NULL,
CONSTRAINT [PK_LoginLog] PRIMARY KEY CLUSTERED 
(
[id] ASC
)WITH (PAD_INDEX = OFF, STATISTICS_NORECOMPUTE = OFF, IGNORE_DUP_KEY = OFF, ALLOW_ROW_LOCKS = ON, ALLOW_PAGE_LOCKS = ON) ON [PRIMARY]
) ON [PRIMARY]
GO 

HWID_Ban

USE [WarZ]
GO
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
CREATE TABLE [dbo].[HWID_Ban](
[HardwareID] [nvarchar](50) NOT NULL,
[Reason] [nvarchar](200) NOT NULL,
CONSTRAINT [PK_MacBan] PRIMARY KEY CLUSTERED 
(
[HardwareID] ASC
)WITH (PAD_INDEX = OFF, STATISTICS_NORECOMPUTE = OFF, IGNORE_DUP_KEY = OFF, ALLOW_ROW_LOCKS = ON, ALLOW_PAGE_LOCKS = ON) ON [PRIMARY]
) ON [PRIMARY]
GO 

Navicat > WarZ > dbo > function > WZ_ACCOUNT_LOGIN

Spoiler:

Search for:

@in_EMail varchar(100), 

Add:

@in_HardwareID varchar(50), 

Search for:

exec WZ_ACCOUNT_LOGIN_EXEC @in_IP, 

Add:

@in_HardwareID, 

WZ_ACCOUNT_LOGIN_EXEC

Spoiler:

Search for:

@in_IP varchar(100), 

Add:

@in_HardwareID varchar(50), 

Search for:

-- check if game is still active or 90sec passed from last update (COPYPASTE_GAMECHECK, search for others)
    if(@GameServerId > 0 and DATEDIFF(second,    [MENTION=1333422059]LASTGAME[/MENTION]date, GETDATE()) < 90) begin
        select
            0 as LoginResult,
               [MENTION=25895]Custom[/MENTION]erID as CustomerID,
            70 as AccountStatus,    -- game still active code
            0 as SessionID,
            0 as IsDeveloper
        return
    end 

Add:

-- Ban por Hardware ID by Yuri-BR
    IF (EXISTS(SELECT * FROM HWID_Ban WHERE HardwareID = @in_HardwareID)) 
    BEGIN
        select
            3 as LoginResult,
               [MENTION=25895]Custom[/MENTION]erID as CustomerID,
            200 as AccountStatus,
            0 as SessionID,
            0 as IsDeveloper
        return
    END 

Search for:

INSERT INTO Logins 
        (CustomerID, LoginTime, IP, LoginSource) 
    VALUES 
            [MENTION=25895]Custom[/MENTION]erID, GETDATE(), @in_IP, 0) 

Add:

-- Insert to HWID_Log
    --if @in_HardwareID != ''
    --begin
        INSERT INTO HWID_Log (CustomerID, ip, HardwareID, time) VALUES     [MENTION=25895]Custom[/MENTION]erID,@in_IP,@in_HardwareID,GETDATE())
    --end 

Add message for Ban Hardware ID and Fix

LauncherConfig.cpp

Spoiler:

Search for:

accountBannedMessage = r3dReadCFG_S(configFile, group, "accountBannedMessage",
        "Your account has been permanently banned"); 

Add:

accountHWBannedMessage = r3dReadCFG_S(configFile, group, "accountHWBannedMessage",
        "Your account has been banned by HardwareID"); 

LauncherConfig.h

Spoiler:

Search for:

std::string accountBannedMessage; 

Add:

std::string accountHWBannedMessage; 

In Updater.cpp

Spoiler:

Search for:

case CLoginHelper::ANS_Banned:
        loginErrMsg_ = "Your account has been permanently banned";
        MessageBox(NULL, gLauncherConfig.accountBannedMessage.c_str(), "Login", MB_OK | MB_ICONSTOP);
        break; 

Add:

case CLoginHelper::ANS_HWBanned:
        loginErrMsg_ = "Your account has been banned by Hardware ID";
        MessageBox(NULL, gLauncherConfig.accountHWBannedMessage.c_str(), "Login", MB_OK | MB_ICONSTOP);
        break; 

WOLoginHelper.cpp

Spoiler:

Search for:

else if(AccountStatus == 201)
        loginAnswerCode = ANS_Frozen; 

Add:

else if(AccountStatus == 202)
        loginAnswerCode = ANS_HWBanned; 

WOLoginHelper.h // Thanks for reminding me @DNC

Spoiler:

Search for:

ANS_Banned, 

Add:

ANS_HWBanned, 

Navicat > WarZ > dbo > function > WZ_ACCOUNT_LOGIN_EXEC

Spoiler:

Search for:

if    [MENTION=1333383561]Accounts[/MENTION]tatus >= 200) begin
        select
            3 as LoginResult,
               [MENTION=25895]Custom[/MENTION]erID as CustomerID,
              [MENTION=1333383561]Accounts[/MENTION]tatus as AccountStatus,
            0 as SessionID,
            0 as IsDeveloper
        return
    end 

Add:

if    [MENTION=1333383561]Accounts[/MENTION]tatus >= 202) begin
        select
            3 as LoginResult,
               [MENTION=25895]Custom[/MENTION]erID as CustomerID,
              [MENTION=1333383561]Accounts[/MENTION]tatus as AccountStatus,
            0 as SessionID,
            0 as IsDeveloper
        return
    end 

Search for:

-- Ban por Hardware ID by Yuri-BR
    IF (EXISTS(SELECT * FROM HWID_Ban WHERE HardwareID = @in_HardwareID)) 
    BEGIN
        select
            3 as LoginResult,
               [MENTION=25895]Custom[/MENTION]erID as CustomerID,
            200 as AccountStatus,
            0 as SessionID,
            0 as IsDeveloper
        return
    END 

Replace for:

-- Ban por Hardware ID by Yuri-BR
    IF (EXISTS(SELECT * FROM HWID_Ban WHERE HardwareID = @in_HardwareID)) 
    BEGIN
        update UsersData set AccountStatus=202 WHERE CustomerID    [MENTION=25895]Custom[/MENTION]erID
        select
            3 as LoginResult,
               [MENTION=25895]Custom[/MENTION]erID as CustomerID,
            202 as AccountStatus,
            0 as SessionID,
            0 as IsDeveloper
        return
    END 

To ban a player, you need to add the Hardware id of player in table HWID_Ban

Credits:
@aomsin2526 for base code
@Yuri BR for Tutorial and alterations

[MentaL]

[iTzTonyR703]

Now, for the replacing (I know this sounds retarded by im learning the ropes of coding again). Do I just search and replace it? Or add under that line.

[Yuri-BR]

Now, for the replacing (I know this sounds retarded by im learning the ropes of coding again). Do I just search and replace it? Or add under that line.

in add is for you add the line

[iTzTonyR703]

Sorry, I do not understand your question

You say. "Search for" then "Add". So, Im guessing out of common sense that I just replace it? >.<

[Yuri-BR]

You say. "Search for" then "Add". So, Im guessing out of common sense that I just replace it? >.<

add below :D

[DNC]

@Yuri BR
Nice post brother
Yes, this is exactly what was in the code you sent me.

<3 much appreciated and great release

[MRsrac]

Lol, nice!
Less work for me.

Need some work still, can be bypassed/spoofed really easily.

[Yuri-BR]

Lol, nice!
Less work for me.

Need some work still, can be bypassed/spoofed really easily.

Yes you can, but I do not care about it

I have a new system for HWID ban not use records

- - - Updated - - -

but if I let the public, will be very easy to find a bypass :(

[AlexRedd]

In New Community Edition, this function is ready?




Thanks for release!

[Yuri-BR]

In New Community Edition, this function is ready?




Thanks for release!

Yes, here's the fix :D

[skyone]

What is :"HWID_Log" ?

[Yuri-BR]

What is :"HWID_Log" ?

to you get the hardware id logged in account ;D

[skyone]

to you get the hardware id logged in account ;D

I have nothing in this table :/

[Yuri-BR]

I have nothing in this table :/

he will show the hardware id that was logged into the account every time you log into the launcher

[skyone]

he will show the hardware id that was logged into the account every time you log into the launcher

in "LoginLog" table i have the HWID but no in HWID_Log

Edit : in LoginLog i have the "MAC" but no the HWID.