How could someone hack into my admin account?!
#4

Код:

strtok... ?!!
strmid(PlayerInfo[playerid][pKey], tmp, 0, strlen(cmdtext), 255);
new MyHash[256];

SHA256_PassHash(tmp, "78sdjs86d2h", MyHash, sizeof(MyHash));
format(PlayerInfo[playerid][pKey], 256, MyHash);

format(MyHash, 256, PlayerInfo[playerid][pKey]);
Seriously, what the heck? I expected better from you, Metharon.
That /changepass cmd is just some convoluted... I don't know what that is.

What I would do is at least escape the name under the dialog, since you don't escape anything.
Use the "%e" specifier with "mysql_format". Oh and thanks for sharing with us your "salt".
Other than that I don't know what the problem is, or where it is. One thing that strikes me though
is in your dialog: "if (strlen(inputtext)". No, please just no. Use "isnull".

I expect better coding from you in the future mister.


Edit: oh yeah, also:
Код:
new stringx[256];
format(stringx, 456, ...
I have no idea on how "format" works, but ain't that just plain memory leak or something? Fix that. Always use "sizeof", it does add more to processing time adding up to compile time but it is safer and quicker (in the long run) to use.
Reply


Messages In This Thread
How could someone hack into my admin account?! - by Metharon - 09.02.2016, 20:44
Re: How could someone hack into my admin account?! - by Crayder - 09.02.2016, 21:46
Re: How could someone hack into my admin account?! - by Metharon - 09.02.2016, 22:06
Re: How could someone hack into my admin account?! - by Virtual1ty - 10.02.2016, 01:15
Re: How could someone hack into my admin account?! - by itsCody - 10.02.2016, 01:21
Re: How could someone hack into my admin account?! - by Sew_Sumi - 10.02.2016, 02:20

Forum Jump:


Users browsing this thread: 1 Guest(s)