Jump to content
  • 0

l2 freya access level


DeViLoS

Question

9 answers to this question

Recommended Posts

  • 0

sthn navicat sto table access_levels pas ekei kai vlepeis ti access level exei auto pou evales px 2 lew egw twra... kai apisis na koitakseis sto gm pio dipla pou leei na exei 1 oxi 0

meta pas sto table admin_command_access_rights

kai oti command 8eleis na mporei na xirsimopiei vazeis 2 px analogos ti access exei opws eipa prin :)

(autos pou exei 2 mporei na xrisimopihsei kai ta access pou einai 3 4 5 6 7)

(autos pou exei 1 mporei kai ta 2 3 4 5 6 ) pistevw na katalaves ti lew.. vevaia mporeis na t alakseis apo to access_levels dn einai diskolo :)

ean exeis kamia alh aporia pes m

Link to comment
Share on other sites

  • 0

Koita px lew to HGM to access level t ine 2 ti 8a t balw isGm =1 i 2?

alla dn 3erw ama alla3ei stas access level command ke dn mporw egw na kanw commands ws admin gt sta access level commands ine ola 1

ke ama balw 2 dn 8a exw egw commands ke 8a exei o HGM

Link to comment
Share on other sites

  • 0

8a mporeis na kaneis giati opws sou eipa to 1 access perilamvanei kai to 2 kai 3 4 5 6 sto dixnei sto access level sto isGm 8a valeis 1 giati to 0 einai oxi kai to 1 nai dn exei 2 3

kai san admin vale to master access to 127 ama 8es... (egw auto exw ston admin m)

Link to comment
Share on other sites

  • 0

oxi re agori m prosekse ti sou lew ligo kalhtera

sto exw pei se 3 post oti ama valeis 1 exei kai ta access apo to 2 kai to 3 kai to 4 kai to 4 level

sto access_level sto childaccess 8a deis oti sto 1 sou exei 2;3;4;5;6;7 sto 2 sou exei 3;4;5;6;7 sto 4 5;6;7 ktlp

auto einai oti to 2 access level 8a mporei na kanei oti kanei to 3 to 4 to 5 to 6 kai to 7

Link to comment
Share on other sites

  • 0

re file 8elw na kanw enan server kai exw kolisei kapou boris na me voi8iseis?

τόσοι οδηγοί υπάρχουν στο φόρουμ,κάτσε και διαβασε τους ή πες μας που κολλάς(αλλά κάνε άλλο τοπικ,μην χαλάς αυτό του παιδιού)
Link to comment
Share on other sites

Guest
This topic is now closed to further replies.


  • Posts

    • Hello if anyone is looking for interlude server with free bot, no P2W and uniques features I can recommend freshly opened https://l2romans.com/features/, great server for chilling and having fun with friends casually. Everyone is welcomed
    • So excited to announce 3x Telegram Premium (6 months)   Join our official TG and participate to win!   Asocks.com - trusted proxy service providing mobile and residential proxies with a single price of $3 per 1GB   A huge locations pool and high speed will help complete all tasks    
    • Well, sorry not sorry for resurrecting old topic, but I believe it's ultimately stupid to implement license checks like Vilmis did 🙂   private static String url = "jdbc:mysql://185.80.128.233/" + getData("Zm9ydW1fZGI="); private static String username = getData("bXJjb3B5cmlnaHQ="); private static String password = getData("Y29weXJpZ2h0XzEyMw=="); con = GlobalDB.getInstance().getConnection(); PreparedStatement statement; statement = con.prepareStatement("SELECT field_6 from core_pfields_content WHERE member_id = ?"); statement.setInt(1, Config.FORUM_USER_ID); ResultSet rset = statement.executeQuery();   This awesome way of coding things leaves us with base64-encoded credentials and DB exposed and accessible globally 😉 Btw he checks his licensing data from some plugin generated table his forum uses. Vilmis took action and ensured that mrcopyright user would have only needed accesses and rights for this operation. But he forgot to ensure that his INFORMATION_SCHEMA database would not be exposed and readable... That leads us to fully readable server variables like version used (10.1.26-MariaDB-0+deb9u1 - pretty ancient DB and OS, I'd assume). From here you can go south and do some kinky stuff, if you want and have knowledge for that. But who cares, right?   Ooh, table core_pfields_content field_6 is IP address which is checked by FORUM_USER_ID. Yep, you can query all IP addresses there (124 of them right now) and also do whatever you want with them! 🙂  The most fun part? Files source has been shared what, more than 2 years ago?  Vilmis still uses very same credentials and never changed it after sources exposure - who cares. Although, "sources" may be way too strong word here. If anyone still use paid Orion versions, I'd suggest packing your shit and leaving immediately, or at least fix this incompetent fool caused problems. It's obvious Vilmis don't care or maybe doesn't even know from the first place how to solve this problem (hint hint - tiny PHP Rest API microservice which would do absolutely the same but without exposing sensitive data?). By doing that, he exposes his infrastructure and YOUR data, and he does that for more than 2 years now 🙂 Developer of century!    
    • rename the l2.bin into l2.exe
  • Topics

×
×
  • Create New...