A user has found a way to get loads and loads of credits on my hotel. I've patched the whole "Discount Furniture" from working on my Exchange catalog page too. There is no exploit in my cms.
This is for r63b, is anyone else having this issue too?
Printable View
A user has found a way to get loads and loads of credits on my hotel. I've patched the whole "Discount Furniture" from working on my Exchange catalog page too. There is no exploit in my cms.
This is for r63b, is anyone else having this issue too?
How do you not know it's CMS related?
They probably did it that way.Quote:
Originally Posted by owot
Because I've looked though my CMS, there is no exploits. Even if there was, why would they use an exploit to give their accounts credits, why not give them a staff rank or delete things. We also have nothing on our CMS that involves credits either.Quote:
Originally Posted by Clawed
The user did this after I patched the Exchange issue, their account was registered 1 hour or so after it was patched and no other accounts had a large amount of credits like this.Quote:
Originally Posted by tdid
They could still have some in their inventory ;)?Quote:
Originally Posted by owot
I think it's because of the CMS. You should always use MUS Commands.
I heard there was a tool for IE, so i made everyone who uses IE to upgrade their browser to Firefox or Chrome. Simple as.
He gained the credits quite quickly, it would of taken some hours to get them credits redeemed because of the amount I have. I also have not coded a redeemitems command yet.Quote:
Originally Posted by tdid
Can you go into more detail with this so I can patch it so IE users can use it too?Quote:
Originally Posted by JohnHearfield
Disable credits on log in in the EMU. That could be the problem as users could just use a program to keep refreshing the hotel so they get tons of credits.
This actually happened on a hotel I play on. It is R63B, as well.
http://i.imgur.com/B07sDhW.png
I get where you are coming from, but the credit amount is at default 100. That would mean there has to be an absolute ton of refreshes. Programs that refresh/click on a spot overload at some point (especially if you set them at like 1 ms) and end up crashing. Anyway, I think the OP would have mentioned the various logins he would have seen on the EMU if this was the case.Quote:
Originally Posted by McFluffy1
I know who did it aswel, but it's been patched now i think.Quote:
Originally Posted by j0pset
All i heard about was some guy can use an extension or Tool for IE to make it so you get over like, a big number of credits.
I own a small-ish hotel, there are not loads of accounts being registered and the starting amount is like 1k credits. I have also removed dailycredits from bcStorm and put a filter on the Credit Update system to check if the user is in hotel view and or afk, they won't get the credits. I can't seem to find any way that this 1 user could gain all them credits (it was a lot) within a couple of minutes :S
I've just experienced this as well..
User called: Anoynmou
He registered on my hotel on the 28th [3days ago??]
and had 2454545creds but only 1200 duckets.