Kingdom Rose threatening about clans

Put your bugs you find in osRose here

Moderators: osRose dev team, ospRose dev team, osiRose dev team, Moderators

Kingdom Rose threatening about clans

Postby hoegarden31 on Sun Mar 02, 2014 4:42 pm

Hello,

So I am posting this in the bug section because it has something to do with bugs in some way...
A few days ago, i saw this message on facebook :

Kingdom Rose
27 februari
Becareful os rose users u wont find your clans if I go inside your server


A few minutes after :

Kingdom Rose or your players lol.

(Link : https://www.facebook.com/kingdom.rose.3 ... n=timeline)

Now there is probably no use in asking that person what the bug is so we can fix it. That is why i came here and post about it. Maybe some people here will know what he is talking about or can actually convince him to share.

All I want is that this project survives. For that people must share problems not use them to hack servers and just mess with the people who worked hard for their server. For me people like that Kingdom Rose just break this community apart.

I hope that this will warn other players who uses OSRose...
I'm the one and only. In heaven and on earth.
Image
hoegarden31
Rackie
Rackie
 
Posts: 150
Joined: Sun Nov 13, 2011 7:13 pm

Re: Kingdom Rose threatening about clans

Postby PurpleYouko on Sun Mar 02, 2014 9:38 pm

Can't say I ever came across a bug in the server files that would allow anyone to delete clans.

If it is a direct hack to the server database then that would be a different thing entirely. If that kind of loophole exists then anything in the database could be messed with.

I remember seeing some weird stuff in my KTRose server log a few years back while i was still running it. Somebody was inputting queries to the database from the game user interface. I don't really think any of them got to the database at all and since I used a non standard database anyway, I wasn't particularly bothered.
Frankly I think whoever was doing it was a couple of sandwiches short of a picnic. There's no feasible way to use queries in game in osrose.
Need to lookup information on NARose items, skills, quests?
Now featuring a newly completed skill tree for all classes
Formatting fixed for different resolutions
Image

"A Gazelle is nothing but a giraffe plotted logarithmicaly"
User avatar
PurpleYouko
Rose Guru
Rose Guru
 
Posts: 4733
Joined: Fri Aug 10, 2007 2:05 pm

Re: Kingdom Rose threatening about clans

Postby toxin on Sat Mar 15, 2014 3:52 pm

well you can simply send a packet to the world to delete the clan or kick the user from the clan, world isnt checking if the packet its really from the user or not
toxin
Pomic
Pomic
 
Posts: 85
Joined: Wed Aug 08, 2007 11:31 pm

Re: Kingdom Rose threatening about clans

Postby Vetyst on Wed May 14, 2014 8:20 am

Should be mhy fould for giving this tool to Kingdom Rose lol, sorry haha.

To be exact, its a packet send betwee char and world server.

it tells both servers than someone has been kicked from the server.
Easy fix:
Dont save any character data when it happens.This is because there is no SQL query executed when this bug is abused.

Try the following:
Taskmanager-> End Process of the World and Char server (this simulates a server crash causing nodatato be saved.
User avatar
Vetyst
osRose dev
osRose dev
 
Posts: 146
Joined: Sat Jun 18, 2011 10:56 am
Location: The Netherlands


Return to Bugs

Who is online

Users browsing this forum: No registered users and 5 guests

cron