EMERGENCY!

[Zeiyan]

sorry i don't know where to post this. One of my GM staff saw a player with a sleipnir on my server, well my server is new so it would be quite impossible to have sleipnir at once. i asked the player how he got it and then he told me he got it from a friend and he just logged out. when i tried to check his account by logging it in. I saw Angra Manyu and Ahura Mazdah. I was like WTF!? so i checked the command log of my database even though they don't have commands to give items, then i checked my reward npc logs. and he's friend account has an item (custom item for gm). I checked and double checked every logs and stuff. I'm currently changing the password for my database and server files. I just want to ask if there is any hack or program that made it possible for players to produce item or duplicate them? If yes you don't need to teach me how they do it (you'll probably think im trying to do it LOL) i just need to know how to prevent it from happening again. please this is urgent

[Jaburak]

That means they got your db informations. Or maybe you have some malicious script that cause your problem.

[Zeiyan]

what do you mean by malicious script? anyway is there any way they could have cracked my db information? a 3rd party program or something? 

[Psyche]

malicious script is something like hidden npc that give an items,

maybe you're use some services? or you're build your server by yourself?

Edited June 3, 2013 by Psyche

[Zeiyan]

I built everything myself. :| i have 2 staff one is a friend in real life so i doubt it's him and the other is actually the one who reported the problem (both of them have no @item/#item or any other commands that can give to players) i checked all my npc scripts including the default ones and there seems to be no malicious scripts. my only conclusion might be they somehow have access to my db which i don't know how would be possible or they used some sort of 3rd party programs which i also don't know if possible

[deso]

Try looking at your event npc maybe event gm can change it's price because it happend to me and destroy my old server.

[lakasmonk]

try to check your npc scripts or other custom scripts you installed on your server and find the item id's your looking for 

[Mr BrycE]

I built everything myself. :| i have 2 staff one is a friend in real life so i doubt it's him and the other is actually the one who reported the problem (both of them have no @item/#item or any other commands that can give to players) i checked all my npc scripts including the default ones and there seems to be no malicious scripts. my only conclusion might be they somehow have access to my db which i don't know how would be possible or they used some sort of 3rd party programs which i also don't know if possible

friend in real life eh?

 

1st time 

i caught my own cousin (GM),he also tells me that they got godly items but i never knew that he's the one giving them until i make a fake account .giving items on players...

 

2nd time

i caught my BESTFRIEND giving items to my other friends.

 

from that moment on, i don't trust anyone when it comes to the server.

Edited June 3, 2013 by Mr BrycE

[EriN_KillerSoul]

easy...remove all unwanted items from item_db.put //

[SlashGeeGee]

easy...remove all unwanted items from item_db.put //

 

it will show many warnings in map server if too many players has the item . something like this :

 

[Warning]: itemdb_search: Item ID 1599 does not exists in the item_db. Using dummy data.

 

better to turn off the server. wipe out the items using SQL script.  then disable the items aleady. 

 

SlashGeeGee

 

Edited June 3, 2013 by SlashGeeGee

[Neo-Mind]

i agree with //gg. Also change your mysql password as well and do not tell anyone what it is. (even your closest friend) &

maybe enabling access logs on your db might help find out anyone trying something similar in future.

http://dev.mysql.com/doc/refman/5.1/en/query-log.html

Edited June 3, 2013 by MStream

[Zeiyan]

easy...remove all unwanted items from item_db.put //

 

it will show many warnings in map server if too many players has the item . something like this :

 

[Warning]: itemdb_search: Item ID 1599 does not exists in the item_db. Using dummy data.

 

better to turn off the server. wipe out the items using SQL script.  then disable the items aleady. 

 

SlashGeeGee

 

 

OH YEA! i  didnt think about using SQL script -___- uhmm. can you pleeeaaassseee give me a sample script that i can work with?

 

(im not very good my sql scripts)

Edited June 3, 2013 by ZeiyanRO

[Rebel]

Try this point it to your inventory:

 

Then add this to sql  query area

 

SELECT * FROM `inventory` where nameid = "number of the item";

 

with no " " like this for example : 1599 for Angra Manyu

 

 

SELECT * FROM `inventory` where nameid = 1599;

 

it will search all nameid 1599 then you can delete it.

 

Hope this helps you.

[nanakiwurtz]

If I was on your position, I won't delete any item at all.

I'll edit it's item script instead, making them less powerful.

In my opinion, GM equipments are made just for fun, not to be used on actual game play, because they like having some sort of 'dark force', it's the same 'dark force' that drives Smeagol to steal and use the Ring for himself!

 

So, I threw those kinds of GM equipments to the 'lava pool' and erases it's memories forever by changing their item script in the item_db.txt, so all the Hobbits could live in peace forever.....

[Zeiyan]

If I was on your position, I won't delete any item at all.

I'll edit it's item script instead, making them less powerful.

In my opinion, GM equipments are made just for fun, not to be used on actual game play, because they like having some sort of 'dark force', it's the same 'dark force' that drives Smeagol to steal and use the Ring for himself!

 

So, I threw those kinds of GM equipments to the 'lava pool' and erases it's memories forever by changing their item script in the item_db.txt, so all the Hobbits could live in peace forever.....

 

This made my day. HAHAHA.Thankyou guys.

Try this point it to your inventory:

 

Then add this to sql  query area

 

 

SELECT * FROM `inventory` where nameid = "number of the item";

 

with no " " like this for example : 1599 for Angra Manyu

 

 

 

SELECT * FROM `inventory` where nameid = 1599;

 

it will search all nameid 1599 then you can delete it.

 

Hope this helps you.

I can work with this thankyou!

[mofo]

I would actually edit the god item scripts in secret, put them in itemdb2. Then watch the noobs go because their powerful weapons are now worse than a knife [3]. This way, you don't need to restart server and they'll never know what hit em.

[Anubis-K]

Try something like this:

Change the script of your equipement to give the bonus just to the GM of a certain level and above (level XX):

 

They will not realize inmediatly about this:

 

if(getgmlevel() >= XX)

bonus, value;

else 

bonus, -value;

 

 

if they are not gm, they will get the oposite bonus, o simply you could kill all of them:

 

if(getgmlevel() >= XX)

bonus, value;

else 

percentheal -100, 0;

[Zeiyan]

Try something like this:

Change the script of your equipement to give the bonus just to the GM of a certain level and above (level XX):

 

They will not realize inmediatly about this:

 

if(getgmlevel() >= XX)

bonus, value;

else 

bonus, -value;

 

 

if they are not gm, they will get the oposite bonus, o simply you could kill all of them:

 

if(getgmlevel() >= XX)

bonus, value;

else 

percentheal -100, 0;

ohhh that's nice. THANKS

[EriN_KillerSoul]

or you just erase the effect of the items

[Rebel]

I prefer for you to delete them .. Because they can still use those item to scam other players even if you change the effects..

[Zeiyan]

Rebel does have a point. well i found a solution. Ip banned those players with items restricted to normal players. deleted un used accounts and accounts not logged in within a month. changed passwords of database and SVN. i guess that's it. :| what's really bugging me is WTF happened. and how'd they do it. -__-