[urgent] Two people using the same id and even name
#1

I don't know if this is fixed in 0.3z but on my server a hacker can somehow join the server then connect multiple accounts using the same id and even name! that opened countless ways of making money and, well, broke the server.
If this is fixed in 0.3z please let me now ASAP, else, address this issue quickly.
Some logs:
Quote:

[19:00:24] [join] Peter has joined the server (202:IP1)
[19:02:26] [join] Peter has joined the server (208:IP1) // notice there were no leaving messages inbetween. Same name, different ID
[19:03:06] [part] Peter has left the server (208:1) // he left?
[19:03:55] [join] Peter has joined the server (172:IP1) // comes again with the different id(notice that id 202 is still connected)
[19:05:46] [join] Peter has joined the server (37:IP1) // another id
[19:06:46] [join] John has joined the server (37:IP1) // diferent name, same ID and IP
[19:06:50] [part] John has left the server (37:1)
[19:07:10] [join] Peter has joined the server (37:IP1)
// and so on.. there are NO disconnect logs of the initial ids

there were NO name changing logs.
And i found a thread about it after writing this whole thing: https://sampforum.blast.hk/showthread.php?tid=474358

P.S. No need to tell me that this can be avoided script-wise. It's a bug and it belongs here and also pretty dangerous.
P.S.S. What name does GetPlayerName return if a hacker changes his name with cheats?
Reply


Messages In This Thread

Forum Jump:


Users browsing this thread: 1 Guest(s)