osROSE Forums

Hello,

So I am posting this in the bug section because it has something to do with bugs in some way...
A few days ago, i saw this message on facebook :

Kingdom Rose
27 februari
Becareful os rose users u wont find your clans if I go inside your server

A few minutes after :

Kingdom Rose or your players lol.

(Link : https://www.facebook.com/kingdom.rose.3 ... n=timeline)

Now there is probably no use in asking that person what the bug is so we can fix it. That is why i came here and post about it. Maybe some people here will know what he is talking about or can actually convince him to share.

All I want is that this project survives. For that people must share problems not use them to hack servers and just mess with the people who worked hard for their server. For me people like that Kingdom Rose just break this community apart.

I hope that this will warn other players who uses OSRose...

Can't say I ever came across a bug in the server files that would allow anyone to delete clans.

If it is a direct hack to the server database then that would be a different thing entirely. If that kind of loophole exists then anything in the database could be messed with.

I remember seeing some weird stuff in my KTRose server log a few years back while i was still running it. Somebody was inputting queries to the database from the game user interface. I don't really think any of them got to the database at all and since I used a non standard database anyway, I wasn't particularly bothered.
Frankly I think whoever was doing it was a couple of sandwiches short of a picnic. There's no feasible way to use queries in game in osrose.

well you can simply send a packet to the world to delete the clan or kick the user from the clan, world isnt checking if the packet its really from the user or not

Should be mhy fould for giving this tool to Kingdom Rose lol, sorry haha.

To be exact, its a packet send betwee char and world server.

it tells both servers than someone has been kicked from the server.
Easy fix:
Dont save any character data when it happens.This is because there is no SQL query executed when this bug is abused.

Try the following:
Taskmanager-> End Process of the World and Char server (this simulates a server crash causing nodatato be saved.