Help me hack command in my server 1.5

My problem is that I am suffering attacks on my server an attacker places a command called "'; DELETE Login -" in my gunz login id and password in and I deleted all my accounts and I have db.login database many problems my question is how to resolve this error i was watching the logs and discovered that the program was now let me see how I can fixear also this other command that I shut the server is "user: '; shutdown - pass: '; shutdown - "

I have a great online gaming community is very interesting personal staff could give them some of my servants ask a great help if you are interested in giving me private message staff.


:*:

you have the answer just make a anti sql injection script function at the server side(matchserver) method that run all sql procedures and you get it ....that happened to me too and i fixed like i described... fortunately i set to automatically make db backup every day ....its a horrible vulnerability at 1.5 source,

Have you added the lobby channel website?

Quote:

---

Originally Posted by trunksx

you have the answer just make a anti sql injection script function at the server side(matchserver) method that run all sql procedures and you get it ....that happened to me too and i fixed like i described... fortunately i set to automatically make db backup every day ....its a horrible vulnerability at 1.5 source,

---

knows you resolve this error or give me the solution: (?

Quote:

---

Have you added the lobby channel website?

---

I did not understand your comment friend

Quote:

---

Originally Posted by Echoki

knows you resolve this error or give me the solution: (?



I did not understand your comment friend

---

qet123 is referring to this;
http://forum.ragezone.com/f245/lobby...e-chat-891885/

If you installed this, it leaves a giant gap for SQL exploits.
That would explain your problem.

You need replace from sprintf for vsprintf_s.