[Help] About hackers L2J

[rebeldevel]

Hi guys,

First of all, yes, I did use search about hackers/hlapex topics.

My problem is: I use a recent version of L2j but I was attacked by a person who logged as a regular player and got all gm access (hlapex?). I

 

[Tobywan]

Your problem is diferent, as far as i know you can't use hlapex or l2walker on L2J.

 

[rebeldevel]

Yes, Tobywan, I thought that too :S

But visiting some weboards I saw that some guys should use. I know another 2 l2j servers that has tha same problem before me...

The only thing I know is: he got gm access, include if any player type /gmlist, his name appeared in that. Our action was fast and problem was solved very quickly. But I need to know what should I do to prevent another problem like this.

 

[brgabriel]

well as some people agree me, all good (and bad)things related to hacks come from russia, so i think u'll need look trough many russian forums, u might find it there and also if you find do n t forget to warn us about it

Good luck on u journey

 

[rebeldevel]

We have found out the problem: the "hackers" used SQL injection in the account creation module. It was our fault, since this account module is fairly known and we thought it was secure. I am modifying the module to avoid future problems with SQL injection.

Do you guys have any extra advice for me? Thanks in advance!

 

[Tobywan]

You could use email activation for your accounts.
I think enforcer wrote that a few months ago and releasd on l2jserver.com

 

[ITALIA]

Well, Im a Hlapex User (For Fun), as I know that Hack/Exploit Is fixed 100% It works For Me In Some C4 off Servers..Never In L2J C5.... If someOne Want some Info...I can give Here..i can Explain too How I logged In GM or Other Players Account...

P.s. I do IT ONLY FOR FUN..Nothing was Touched By Me .

 

[rebeldevel]

well, ty all, guys. For a while, no more problems. lets wait and see.