Help me hack command in my server 1.5

[Echoki]

My problem is that I am suffering attacks on my server an attacker places a command called "'; DELETE Login -" in my gunz login id and password in and I deleted all my accounts and I have db.login database many problems my question is how to resolve this error i was watching the logs and discovered that the program was now let me see how I can fixear also this other command that I shut the server is "user: '; shutdown - pass: '; shutdown - "

I have a great online gaming community is very interesting personal staff could give them some of my servants ask a great help if you are interested in giving me private message staff.


:*:

 

[trunksx]

you have the answer just make a anti sql injection script function at the server side(matchserver) method that run all sql procedures and you get it ....that happened to me too and i fixed like i described... fortunately i set to automatically make db backup every day ....its a horrible vulnerability at 1.5 source,

 

[qet123]

Have you added the lobby channel website?

 

[Echoki]

you have the answer just make a anti sql injection script function at the server side(matchserver) method that run all sql procedures and you get it ....that happened to me too and i fixed like i described... fortunately i set to automatically make db backup every day ....its a horrible vulnerability at 1.5 source,

knows you resolve this error or give me the solution: (?

Have you added the lobby channel website?

I did not understand your comment friend

 

[Hashed]

knows you resolve this error or give me the solution: (?



I did not understand your comment friend

qet123 is referring to this;
http://forum.ragezone.com/f245/lobby-website-chat-891885/

If you installed this, it leaves a giant gap for SQL exploits.
That would explain your problem.

 

[a1tl4]

You need replace from sprintf for vsprintf_s.