Jump to content

Question

Posted (edited)

Hello guys,
There is a bug in my server,which allows players to have multiple classes skills.
For example,Saggitarius with Paladin skills.I know it's related to PHX.
I tried this fix,but it just removed every skill:
 

	public L2Skill addSkill(L2Skill newSkill, boolean store)
	{
		// Add a skill to the L2PcInstance _skills and its Func objects to the calculator set of the L2PcInstance
		L2Skill oldSkill = super.addSkill(newSkill);

		// Add or update a L2PcInstance skill in the character_skills table of the database
		if (store)
			storeSkill(newSkill, oldSkill, -1);

+		if(!SkillTreeTable.getInstance().getAllAvailableSkills(this, getClassId()).contains(newSkill))
+			removeSkill(newSkill,false);
		
		return oldSkill;
	}

I am using acis 320

Edited by StealthyS4m

11 answers to this question

Recommended Posts

  • 0
Posted

consider of adding a check in enterworld..

 

so every time player will log in,it will check his skills.

 

its a lame fix,but I can't provide more tips since you haven't add more informations about this bug(how players are doing it etc).

  • 0
Posted (edited)

You have to create an admincommand or a mySQL query which pick each character raw, take their classes, and verify ids of skills according the class. If there are positive results, you ban their accounts.

 

If you want to make it automatically, create a method fired AFTER player skill loading, and check directly from here. If found, client closes packet + ban account.

 

You have to compare 2 lists of skillIds, basically, availableForClass and currentPlayer. If currentPlayer got a single id which is diferent, you drop it. It's the fastest and easiest way.

 

PS : think about hardcoded skills : nobless, hero, dwarven,...

Edited by Tryskell
  • 0
Posted

Take one unique skill for every class, for example frenzy, rabbit totem, snipe, because there is only one class which can have thiis skill. So if selected played has more than 1 unique skill ban him. As far as i know u cant add one skill using the bug u mentioned, if someone mixed 2 classes he will have complete skillset. So thats the simples solution imo

  • 0
Posted (edited)

Well,I don't want to ban,but I tried one thing.
 

	public void sendSkillList()
	{
		final L2ItemInstance formal = getInventory().getPaperdollItem(Inventory.PAPERDOLL_CHEST);
		final boolean isWearingFormalWear = formal != null && formal.getItem().getBodyPart() == L2Item.SLOT_ALLDRESS;

		boolean isDisabled = false;
		SkillList sl = new SkillList();
+		///////////////////
+		HashMap <Integer,Integer> AvSkills = new HashMap<>();
+		addToListSL(AvSkills, SkillTreeTable.getInstance().getAllowedSkills(getClassId()));
+		addToListS(AvSkills,SkillTable.getHeroSkills());
+		addToListS(AvSkills,SkillTable.getNobleSkills());
+		addToListRSL(AvSkills,SkillTreeTable.getInstance().getAvailableRebirthSkills(this, getClassId()));
+		AvSkills.put(L2Skill.SKILL_CREATE_COMMON,10);
+		AvSkills.put(L2Skill.SKILL_CREATE_DWARVEN,10);
+		AvSkills.put(L2Skill.SKILL_CRYSTALLIZE,10);
+		AvSkills.put(L2Skill.SKILL_DIVINE_INSPIRATION,10);
+		AvSkills.put(L2Skill.SKILL_LUCKY,10);
+		AvSkills.put(L2Skill.SKILL_NPC_RACE,10);
+		////////////////////
		
		for (L2Skill s : getAllSkills())
		{
			if (s == null)
				continue;

			if (s.getId() > 9000 && s.getId() < 9007)
				continue; // Fake skills to change base stats

			if (getClan() != null)
				isDisabled = s.isClanSkill() && getClan().getReputationScore() < 0;

			if (isCursedWeaponEquipped()) // Only Demonic skills are available
				isDisabled = !s.isDemonicSkill();
			else if (isMounted()) // else if, because only ONE state is possible
			{
				if (getMountType() == 1) // Only Strider skills are available
					isDisabled = !s.isStriderSkill();
				else if (getMountType() == 2) // Only Wyvern skills are available
					isDisabled = !s.isFlyingSkill();
			}
			
			
			if (isWearingFormalWear)
				isDisabled = true;
+			if(AvSkills.containsKey(s.getId()))
			sl.addSkill(s.getId(),s.getLevel()<AvSkills.get(s.getId())?s.getLevel():AvSkills.get(s.getId()) , s.isPassive(), isDisabled);//Changed a bit    
		
		}
		
		
		sendPacket(sl);
	}

+	public static void addToListSL(HashMap<Integer,Integer> a,Collection<L2SkillLearn> b){
+		Iterator <L2SkillLearn> itr = b.iterator();
+		while(itr.hasNext()){
+			L2SkillLearn tempSkill = itr.next();
+			a.put(tempSkill.getId(), tempSkill.getLevel());
+		}
+	}
+	public static void addToListRSL(HashMap<Integer,Integer> a, Collection <L2RebirthSkillLearn> b){
+		Iterator <L2RebirthSkillLearn> itr = b.iterator();
+		while(itr.hasNext()){
+			L2RebirthSkillLearn tempSkill = itr.next();
+			a.put(tempSkill.getId(), tempSkill.getLevel());
+		}
+	}
+	public static void addToListS(HashMap<Integer,Integer> a,L2Skill [] b){
+		for(int c = 0;c<b.length;c++){
+			a.put(b[c].getId(), b[c].getLevel());
+		}
+	}
	

This change should check player's skills on login and if there any that shouldn't be there just don't add it,plus it checks levels.What do you guys think?

Edited by StealthyS4m
Guest
This topic is now closed to further replies.


  • Posts

    • 🏰 L2EXALTA LEGACY — Interlude x45 📅 Grand Opening: 31/07/2026 — 21:30 (GMT+3) 🌐 Website: https://l2exalta.org/ 💬 Discord: https://discord.gg/zNTCZD4AcT 📌 Wiki: https://l2exalta.org/en/wiki.html#progression   ⚙️ MAIN INFO Chronicle : Interlude Rates : x45 Adena : x50 Spoil : x1 Drop : x5 Safe Enchant : +3 Files : L2OFF   💰 ECONOMY EX Coin : dynamic market currency, mined from monsters, Raid Bosses and Grand Bosses value fluctuates over time Exalta Vouchers : premium currency used for store, donations and EX Coin exchange Exchange : convert EX Coin into Exalta Vouchers Investment options : choose safer or riskier market strategies with EX Coin   ⚔️ PROGRESSION & GEAR Exalta Armors : signature top-tier gear line Forge System : upgrade weapons, armor and jewels with risk/reward mechanics Raid Boss progression tied to materials and prestige   🤖 AUTOFARM Access : Auto Hunting button, bottom-right UI Duration : controlled via tickets or in-game currency Route Mode : record custom farm routes Support Mode : healer/support builds auto-follow, heal and assist party Smart targeting logic with class-specific behavior (mage/archer/melee/support) Captcha designed not to interrupt legitimate AutoFarm sessions   🧪 BUFFER Exalta Buffer NPC/interface Scheme Buffer : save multiple buff loadouts Class presets for mage, fighter, support, PvP   🛠️ SMART GADGETS / QOL Autoloot filter Drop value tracker Boss timer tools Farm stats tracker Auto-consume system In-game server assistant   🗺️ DUNGEON FINDER / PVE Party matching with roles (Tank / Healer / DPS) Ready-check before teleport Monastery of Silence custom PvE zone Party-based reward structure   🎟️ DAILY PROGRESS / EXALTA PASS Daily and weekly tasks (farm, PvP, boss, check-in) Premium Pass track with extra rewards Monastery Daily Quest Reward boards for claiming progress   🏠 HOUSING & EXPEDITIONS Player residences with service NPCs Exalta Spirit Expeditions to themed territories Rewards vary by territory Owner-only access   🏆 PVP / TOURNAMENT Scheduled Tournament system Ranking points from wins/participation Spectator Mode for watching live matches PvP Statues for top-ranked players Anti-feed protections   🛡️ CLAN CONTENT Clan Civil War battlefield event Clan Dungeon Raid content DPS Meter for contribution tracking Support Credit system Classic siege/clan politics preserved   🏪 AUCTION / SHOPS Auction House with seller fee Black Market Dealer (limited-time special offers) Custom shops and multisells Confirmation prompts on purchases/sales   💳 DONATIONS / VIP Donation rewards linked to Exalta Vouchers VIP tiers with comfort/cosmetic bonuses Premium store Gift/promo codes for events   🎥 STREAMER / COMMUNITY Streamer Panel with visible stream links Viewer rewards system Streamer Points for cosmetics/vouchers In-game voice chat (global/party/clan/alliance/command)   🔒 FAIR PLAY Strong Anti-Bot protection Reward protection tied to valid client state Captcha on suspicious activity Staff investigation tools No bots, packet tools or modified clients allowed   👑 GRANDBOSS SPAWNS Orfen : 1 day + 1h random Core : 1 day + 1h random Queen Ant : 1 day 6h + 1h random Zaken : 2 days 12h + 1h random Baium : 5 days + 1h random Antharas : 8 days + 1h random Valakas : 11 days + 1h random   🏅 OLYMPIAD Runs Thursday, Friday, Saturday Heroes change monthly Balanced and fair matchmaking
    • yup basically another one just in case https://drive.google.com/file/d/1UtccbD9e50x3WEnQBab2PTZnBHwpcGYM/view?usp=sharing LineageWarrior.FMagic (CollideActors = True; > False) LineageWarrior.FOrc (CollideActors = True; > False) LineageWarrior.FShaman (CollideActors = True; > False) LineageWarrior.MDarkElf (CollideActors = True; > False) LineageWarrior.MDwarf (CollideActors = True; > False) LineageWarrior.MElf (CollideActors = True; > False) LineageWarrior.MFighter (CollideActors = True; > False) LineageWarrior.MMagic (CollideActors = True; > False) LineageWarrior.MOrc (CollideActors = True; > False) LineageWarrior.MShaman (CollideActors = True; > False) LineageWarrior.FDwarf (CollideActors = True; > False) LineageWarrior.FElf (CollideActors = True; > False) LineageWarrior.FFighter (CollideActors = True; > False)
    • @l2naylondev Requiring a player to log in just for the sake of logging  seems exploitable. Someone could log in only to claim the reward and immediately leave, or repeatedly change their ip. So i guess  are there are additional protections in place ? such as locking the reward by account, character , and ip. It would also be useful to add a playtime requirement. For example, after logging in, the player would need to remain active for at least x playtime  before getting the reward or other parameters configurable by the xml.  I suggest improving the system before selling it. 
  • Topics

×
×
  • Create New...

Important Information

This community uses essential cookies to function properly. Non-essential cookies and third-party services are used only with your consent. Read our Privacy Policy and We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue..