- 0
-
Posts
-
So excited to announce 3x Telegram Premium (6 months) Join our official TG and participate to win! Asocks.com - trusted proxy service providing mobile and residential proxies with a single price of $3 per 1GB A huge locations pool and high speed will help complete all tasks -
Well, sorry not sorry for resurrecting old topic, but I believe it's ultimately stupid to implement license checks like Vilmis did 🙂 private static String url = "jdbc:mysql://185.80.128.233/" + getData("Zm9ydW1fZGI="); private static String username = getData("bXJjb3B5cmlnaHQ="); private static String password = getData("Y29weXJpZ2h0XzEyMw=="); con = GlobalDB.getInstance().getConnection(); PreparedStatement statement; statement = con.prepareStatement("SELECT field_6 from core_pfields_content WHERE member_id = ?"); statement.setInt(1, Config.FORUM_USER_ID); ResultSet rset = statement.executeQuery(); This awesome way of coding things leaves us with base64-encoded credentials and DB exposed and accessible globally 😉 Btw he checks his licensing data from some plugin generated table his forum uses. Vilmis took action and ensured that mrcopyright user would have only needed accesses and rights for this operation. But he forgot to ensure that his INFORMATION_SCHEMA database would not be exposed and readable... That leads us to fully readable server variables like version used (10.1.26-MariaDB-0+deb9u1 - pretty ancient DB and OS, I'd assume). From here you can go south and do some kinky stuff, if you want and have knowledge for that. But who cares, right? Ooh, table core_pfields_content field_6 is IP address which is checked by FORUM_USER_ID. Yep, you can query all IP addresses there (124 of them right now) and also do whatever you want with them! 🙂 The most fun part? Files source has been shared what, more than 2 years ago? Vilmis still uses very same credentials and never changed it after sources exposure - who cares. Although, "sources" may be way too strong word here. If anyone still use paid Orion versions, I'd suggest packing your shit and leaving immediately, or at least fix this incompetent fool caused problems. It's obvious Vilmis don't care or maybe doesn't even know from the first place how to solve this problem (hint hint - tiny PHP Rest API microservice which would do absolutely the same but without exposing sensitive data?). By doing that, he exposes his infrastructure and YOUR data, and he does that for more than 2 years now 🙂 Developer of century! -
-
-
L2LIVE.PRO- Dynamic Mid-rates Essence Seven Signs GRAND OPENING - July 5, 20:00 GMT+3 (EEST) TEST SERVER IS OPEN - COME AND CHECK IT OUT TODAY! Join our community and be part of it at: https://www.l2live.pro https://discord.gg/k3NMgR4Dmu Server description * EXP/SP: Dynamic (x1- x100 based on your level, *before* Sayha and EXP buffs * Adena: x50 / Item Drop: x10 / Fishing EXP increased / Attribute EXP increased * Simplified gameplay to stay in the loop while not spending hours and hours farming * Starter Pack containing very useful items for beginners * MP replenishing potions with auto-consumption * No overpowered donations L2LIVE shop * All spellbook coupons, pet spellbook coupons and master books are sold via Game Assistant * Additionally you can buy SP pouches, enchanted talismans, pet training guides and various other consumables for Adena and L-Coin * More items such as cloaks, more talismans, agathions, belts, pendants, enchantment scrolls of various grades, evolution stones, etc will be added! Shop server as a shortcut, and all retail-like ways of earning items are still here! L-Coins * Drops with small change and in random amounts from Lv60+ monsters * All raidbosses drop random amount of L-Coin Pouches generating up to 420 Lcoin per unit. **Grand Olympiad and Events** * Grand Olympiad is held week day * Format is 1v1, unlimited weekly fights * Heroes are declared weekly at Sunday * There are three automated events - TvT, CTF and Deathmatch, running at evenings * Orc Fortress, Battle with Balok, Keber Hunter, Archievements Box, Daily Gift Calendar provisional events are active too Custom user commands * .offlineplay command, your character will keep playing till death or server restart * .offlineshop command, keeps your shop sitting until all items are purchased * .apon / .apoff - enable/disable HP/MP autoconsume And lots of other small improvements are waiting for you! Join our community and be part of it at: https://www.l2live.pro https://discord.gg/k3NMgR4Dmu
-
-
-
-
Topics
-
Question
arisPlC
Mages psaxno ena pc na aniksoume server eime enas kalos developer ego tha ton anigka se emena alla oute to jdk den litourgi oute ports den mou anigi kanena alla pack exo etimasi
exo fix
Anti - PHX Announce
Anti - PHX Enchant
Anti - PHX Critical Error
Anti - PHX Multisell Bugg
Anti PvP Bot
L2Walker Fixed
Backstab Restriction (success only from back)
Clan Skills in Olympiad Fixed
Fake Death in Olympiad Fixed
Same IP in Olympiad Fixed
Pre - Frenzy / Zealot and others in Olympiad fixed
Freeze Players in Sub to avoid stuck
Funny Flood Fixed
Force Bugg Fixed
CP Bugg Fixed
Enchant Bugg Fixed
Pet Enchant Fixed
Trade Bugg Fixed
Lifestone Skills Stuck in subclass Fixed
Flagged Players Cannot Use Gatekeeper
FloodProtectors :
[Chat,
ChatShout
ChatAlly,
ChatClan,
HeroVoice,
PMs,
TradeChat,
PartyChat,
UseItem,
RollDice,
FireWork,
Item / Pet Summon,
SubClass,
Multisell,
ByPassToServer,
Crystalize,
Warehouse,
DropItem,
MacroCreate,
FriendInvite,
Enchant,
GiveItemsToPet,
GetItemsFromPet]
L2J Attacker - Killer*
DDoS*
* = I provide programs for these ones Smiley
==========================================================================================
Customs / Modifications
Events
CTF Event
TvT Event
DeathMatch
Fortress Siege
Pc Bang Points
Trivial Event
Voiced Command Handlers
.cl - Teleports a player to his clan leader
.heal - Full Heals a player in peace zones only
.cancel - Cancels all the buffs of a player only in peace zones
.logout - Logs a player out of the game
.online - Shows the amount of online players
.pvp - Teleports a player to the pvp zone of your choice
Away System
.away
.back
Banking System
.deposit
.withdraw
.bank
.joinoly - Enters you in olympiad
.leaveoly - You leave Olympiad
.ctfjoin - Registers you for the ctf events
.ctfleave - You leave the ctf event
.ctfinfo - You get info about a running ctf
.tvtjoin - Registers you for a tvt event
.tvtleave - You leave a tvt event
.tvtinfo - You get info about a running tvt event
.jointrivial - Registers a player for the trivial event
.leavetrivial - Unregisters a player from a trivial event
.pmoff - Enables - Disables Message Refusal Mode
.tradeoff - Enables trade refusal mode
.tradeon - Disables trade refusal mode
NOTE : These commands can be used under specified circumstances in order to avoid exploits
Admin Command Handlers
Commands for the ctf event
//ctf
//ctf_name, //ctf_desc, //ctf_join_loc,//ctf_edit,//ctf_control,
//ctf_minlvl, //ctf_maxlvl,//ctf_tele_npc,//ctf_tele_team, //ctf_tele_flag,
//ctf_npc, //ctf_npc_pos,
//ctf_reward, //ctf_reward_amount,
//ctf_team_add, //ctf_team_remove, //ctf_team_pos, c//tf_team_color,//ctf_team_flag,
//ctf_join, //ctf_teleport,//ctf_start, //ctf_abort, //ctf_finish,
//ctf_sit, //ctf_dump, //ctf_save, //ctf_load, //ctf_jointime,
//ctf_eventtime, //ctf_autoevent,//ctf_minplayers,//ctf_maxplayers
Commands for the DeathMatch Event
//dmevent, //dmevent_name, //dmevent_desc, //dmevent_join_loc,
//dmevent_minlvl, //dmevent_maxlvl, //dmevent_npc, //dmevent_npc_pos,
//dmevent_reward, //dmevent_reward_amount, //dmevent_spawnpos, //dmevent_color,
//dmevent_join, //dmevent_teleport, //dmevent_start, //dmevent_abort, //dmevent_finish,
//dmevent_sit, //dmevent_dump, //dmevent_save, //dmevent_load
Commands for the Fortress Siege Event
//fos,//fos_pg2,//fos_pg3,
//fos_name, //fos_desc, //fos_join_loc,//fos_tele1,//fos_tele2,
//fos_minlvl, //fos_maxlvl,//fos_door6,//fos_tele3,//fos_tele4,
//fos_npc, //fos_npc_pos, //fos_door1,//fos_door2,//fos_door3,
//fos_reward, //fos_reward_amount,//fos_door4,//fos_door5,
//fos_teamname, //fos_team_pos, //fos_team_color,//fos_team_flag,//fos_team_cent,
//fos_join, //fos_teleport, //fos_start, //fos_abort, //fos_finish,
//fos_sit, //fos_dump, //fos_save, //fos_load, //fos_jointime,
//fos_eventtime, //fos_autoevent,//fos_minplayers,//fos_maxplayers
Commands for the trivial event
//trivial,//trivial_name,
//trivial_desc,
//trivial_join_loc,//trivial_npc,
//trivial_npc_pos,
//trivial_reward,
//trivial_reward_amount,
//trivial_abort,//trivial_save,//trivial_load,
//trivial_questionNumber,//trivial_jointime,
//trivial_answerTime,//trivial_autoevent,//trivial_addQuestion,
//trivial_setQuestion,//trivial_setAnswer1,
//trivial_setAnswer2,//trivial_setAnswer3,
//trivial_setAnswer4,//trivial_setAnswer5,//trivial_setCorrectAnswer,//trivial_saveQuestion
Commands for the TvT Event
//tvt,
//tvt_name, //tvt_desc, //tvt_join_loc,
//tvt_minlvl, //tvt_maxlvl,
//tvt_npc, //tvt_npc_pos,
//tvt_reward, //tvt_reward_amount,
//tvt_team_add, //tvt_team_remove, //tvt_team_pos, //tvt_team_color,
//tvt_join, //tvt_teleport, //tvt_start, //tvt_abort, //tvt_finish,
//tvt_sit, //tvt_dump, //tvt_save, //tvt_load, //tvt_jointime,
//tvt_eventtime, //tvt_autoevent,//tvt_minplayers,//tvt_maxplayers
pvp/pk system colour
kai exo bali kai custom items
L2Gold Wepons /Epic Armor/ Vesper Wings/Special Hat Gia Donate To exo kani na dini pola stats
fisika etimo system episis exi
Starting Modifications
Custom Starting Level [as you wish]
Custom Starting Items
Custom Starting Title
Custom Subclass Starting Level
Welcome PM On Start
Announcements
Announce Castle Lord's Login
Announce Hero's Login
Auto Announce PvP / PK Kills
Link to comment
Share on other sites
23 answers to this question
Recommended Posts