Tt11.00.00 grand hack

[ezramod]

hello, my server is hacked :
a player can enter with any character without that character is in that account
look at this screenshoot:

[MentaL]

[KarLi]

try using MD5 databases for being more secure or idk

[ezramod]

how to use MD5 need to delete all account?

[KarLi]

yea ,,,
but if u donit wanna delete then no idea :X ur files are unsecure or something like ur pc..

[[KeysS]]

Maybe you can edit your table for not accept Null values? cuz that is without value or put a if on your column "If id lenght is <3, don't accept" something like that :) is just a idea for that :) and if you was hacked ... i don't think you was injected cuz that was like:

Update Accountcharacter set Id="" where id="IDACCOUNT"

Cuz for be hack uhmm i don't know is like a empty account :)

For md5 you will convert your Password column from varchar to varbinary(lenght) lenght is that you want :), you will need use function md5 for convert all pass from your db :) good luck.

[mauka]

u can also do set where password or where CharName, m i wrong?

[ezramod]

this is my accountCharacter Table:

what is wrong here?