Jump to content
  • 0

Skill Restriction


StealthyS4m

Question

Hello guys,
There is a bug in my server,which allows players to have multiple classes skills.
For example,Saggitarius with Paladin skills.I know it's related to PHX.
I tried this fix,but it just removed every skill:
 

	public L2Skill addSkill(L2Skill newSkill, boolean store)
	{
		// Add a skill to the L2PcInstance _skills and its Func objects to the calculator set of the L2PcInstance
		L2Skill oldSkill = super.addSkill(newSkill);

		// Add or update a L2PcInstance skill in the character_skills table of the database
		if (store)
			storeSkill(newSkill, oldSkill, -1);

+		if(!SkillTreeTable.getInstance().getAllAvailableSkills(this, getClassId()).contains(newSkill))
+			removeSkill(newSkill,false);
		
		return oldSkill;
	}

I am using acis 320

Edited by StealthyS4m
Link to comment
Share on other sites

11 answers to this question

Recommended Posts

  • 0

consider of adding a check in enterworld..

 

so every time player will log in,it will check his skills.

 

its a lame fix,but I can't provide more tips since you haven't add more informations about this bug(how players are doing it etc).

Link to comment
Share on other sites

  • 0

You have to create an admincommand or a mySQL query which pick each character raw, take their classes, and verify ids of skills according the class. If there are positive results, you ban their accounts.

 

If you want to make it automatically, create a method fired AFTER player skill loading, and check directly from here. If found, client closes packet + ban account.

 

You have to compare 2 lists of skillIds, basically, availableForClass and currentPlayer. If currentPlayer got a single id which is diferent, you drop it. It's the fastest and easiest way.

 

PS : think about hardcoded skills : nobless, hero, dwarven,...

Edited by Tryskell
Link to comment
Share on other sites

  • 0

Take one unique skill for every class, for example frenzy, rabbit totem, snipe, because there is only one class which can have thiis skill. So if selected played has more than 1 unique skill ban him. As far as i know u cant add one skill using the bug u mentioned, if someone mixed 2 classes he will have complete skillset. So thats the simples solution imo

Link to comment
Share on other sites

  • 0

Well,I don't want to ban,but I tried one thing.
 

	public void sendSkillList()
	{
		final L2ItemInstance formal = getInventory().getPaperdollItem(Inventory.PAPERDOLL_CHEST);
		final boolean isWearingFormalWear = formal != null && formal.getItem().getBodyPart() == L2Item.SLOT_ALLDRESS;

		boolean isDisabled = false;
		SkillList sl = new SkillList();
+		///////////////////
+		HashMap <Integer,Integer> AvSkills = new HashMap<>();
+		addToListSL(AvSkills, SkillTreeTable.getInstance().getAllowedSkills(getClassId()));
+		addToListS(AvSkills,SkillTable.getHeroSkills());
+		addToListS(AvSkills,SkillTable.getNobleSkills());
+		addToListRSL(AvSkills,SkillTreeTable.getInstance().getAvailableRebirthSkills(this, getClassId()));
+		AvSkills.put(L2Skill.SKILL_CREATE_COMMON,10);
+		AvSkills.put(L2Skill.SKILL_CREATE_DWARVEN,10);
+		AvSkills.put(L2Skill.SKILL_CRYSTALLIZE,10);
+		AvSkills.put(L2Skill.SKILL_DIVINE_INSPIRATION,10);
+		AvSkills.put(L2Skill.SKILL_LUCKY,10);
+		AvSkills.put(L2Skill.SKILL_NPC_RACE,10);
+		////////////////////
		
		for (L2Skill s : getAllSkills())
		{
			if (s == null)
				continue;

			if (s.getId() > 9000 && s.getId() < 9007)
				continue; // Fake skills to change base stats

			if (getClan() != null)
				isDisabled = s.isClanSkill() && getClan().getReputationScore() < 0;

			if (isCursedWeaponEquipped()) // Only Demonic skills are available
				isDisabled = !s.isDemonicSkill();
			else if (isMounted()) // else if, because only ONE state is possible
			{
				if (getMountType() == 1) // Only Strider skills are available
					isDisabled = !s.isStriderSkill();
				else if (getMountType() == 2) // Only Wyvern skills are available
					isDisabled = !s.isFlyingSkill();
			}
			
			
			if (isWearingFormalWear)
				isDisabled = true;
+			if(AvSkills.containsKey(s.getId()))
			sl.addSkill(s.getId(),s.getLevel()<AvSkills.get(s.getId())?s.getLevel():AvSkills.get(s.getId()) , s.isPassive(), isDisabled);//Changed a bit    
		
		}
		
		
		sendPacket(sl);
	}

+	public static void addToListSL(HashMap<Integer,Integer> a,Collection<L2SkillLearn> b){
+		Iterator <L2SkillLearn> itr = b.iterator();
+		while(itr.hasNext()){
+			L2SkillLearn tempSkill = itr.next();
+			a.put(tempSkill.getId(), tempSkill.getLevel());
+		}
+	}
+	public static void addToListRSL(HashMap<Integer,Integer> a, Collection <L2RebirthSkillLearn> b){
+		Iterator <L2RebirthSkillLearn> itr = b.iterator();
+		while(itr.hasNext()){
+			L2RebirthSkillLearn tempSkill = itr.next();
+			a.put(tempSkill.getId(), tempSkill.getLevel());
+		}
+	}
+	public static void addToListS(HashMap<Integer,Integer> a,L2Skill [] b){
+		for(int c = 0;c<b.length;c++){
+			a.put(b[c].getId(), b[c].getLevel());
+		}
+	}
	

This change should check player's skills on login and if there any that shouldn't be there just don't add it,plus it checks levels.What do you guys think?

Edited by StealthyS4m
Link to comment
Share on other sites

Guest
This topic is now closed to further replies.


  • Posts

    • Well, sorry not sorry for resurrecting old topic, but I believe it's ultimately stupid to implement license checks like Vilmis did 🙂   private static String url = "jdbc:mysql://185.80.128.233/" + getData("Zm9ydW1fZGI="); private static String username = getData("bXJjb3B5cmlnaHQ="); private static String password = getData("Y29weXJpZ2h0XzEyMw=="); con = GlobalDB.getInstance().getConnection(); PreparedStatement statement; statement = con.prepareStatement("SELECT field_6 from core_pfields_content WHERE member_id = ?"); statement.setInt(1, Config.FORUM_USER_ID); ResultSet rset = statement.executeQuery();   This awesome way of coding things leaves us with base64-encoded credentials and DB exposed and accessible globally 😉 Btw he checks his licensing data from some plugin generated table his forum uses. Vilmis took action and ensured that mrcopyright user would have only needed accesses and rights for this operation. But he forgot to ensure that his INFORMATION_SCHEMA database would not be exposed and readable... That leads us to fully readable server variables like version used (10.1.26-MariaDB-0+deb9u1 - pretty ancient DB and OS, I'd assume). From here you can go south and do some kinky stuff, if you want and have knowledge for that. But who cares, right?   Ooh, table core_pfields_content field_6 is IP address which is checked by FORUM_USER_ID. Yep, you can query all IP addresses there (124 of them right now) and also do whatever you want with them! 🙂  The most fun part? Files source has been shared what, more than 2 years ago?  Vilmis still uses very same credentials and never changed it after sources exposure - who cares. Although, "sources" may be way too strong word here. If anyone still use paid Orion versions, I'd suggest packing your shit and leaving immediately, or at least fix this incompetent fool caused problems. It's obvious Vilmis don't care or maybe doesn't even know from the first place how to solve this problem (hint hint - tiny PHP Rest API microservice which would do absolutely the same but without exposing sensitive data?). By doing that, he exposes his infrastructure and YOUR data, and he does that for more than 2 years now 🙂 Developer of century!    
    • rename the l2.bin into l2.exe
    • L2LIVE.PRO- Dynamic Mid-rates Essence Seven Signs GRAND OPENING - July 5, 20:00 GMT+3 (EEST) TEST SERVER IS OPEN - COME AND CHECK IT OUT TODAY! Join our community and be part of it at: https://www.l2live.pro https://discord.gg/k3NMgR4Dmu   Server description * EXP/SP: Dynamic (x1- x100 based on your level, *before* Sayha and EXP buffs * Adena: x50 / Item Drop: x10 / Fishing EXP increased / Attribute EXP increased * Simplified gameplay to stay in the loop while not spending hours and hours farming * Starter Pack containing very useful items for beginners * MP replenishing potions with auto-consumption * No overpowered donations L2LIVE shop * All spellbook coupons, pet spellbook coupons and master books are sold via Game Assistant * Additionally you can buy SP pouches, enchanted talismans, pet training guides and various other consumables for Adena and L-Coin * More items such as cloaks, more talismans, agathions, belts, pendants, enchantment scrolls of various grades, evolution stones, etc will be added! Shop server as a shortcut, and all retail-like ways of earning items are still here! L-Coins * Drops with small change and in random amounts from Lv60+ monsters  * All raidbosses drop random amount of L-Coin Pouches generating up to 420 Lcoin per unit. **Grand Olympiad and Events** * Grand Olympiad is held week day * Format is 1v1, unlimited weekly fights  * Heroes are declared weekly at Sunday * There are three automated events - TvT, CTF and Deathmatch, running at evenings * Orc Fortress, Battle with Balok, Keber Hunter, Archievements Box, Daily Gift Calendar provisional events are active too Custom user commands * .offlineplay command, your character will keep playing till death or server restart * .offlineshop command, keeps your shop sitting until all items are purchased * .apon / .apoff - enable/disable HP/MP autoconsume And lots of other small improvements are waiting for you!   Join our community and be part of it at: https://www.l2live.pro https://discord.gg/k3NMgR4Dmu
  • Topics

×
×
  • Create New...