[Lordzy]

Quote:

Originally Posted by Shetch Do you mean showing a player dialog ID 1 and receiving response from dialog ID 2? I thought SA-MP server is already protected against invalid dialogid responses by itself, no?

There were few tools designed to send fake packets to the server, such as what you've doubted. I'm not sure whether they've been fixed on the latest version.

Also, why hasn't anyone considered about the listitem ID sent to server by the client? Suppose there's a dialog list which will contain list items such as "Dodo\nSparrow" and the same dialog ID, if shown to an administrator will have "Dodo\nSparrow\nSeaSparrow\nHunter". As you can see the dialog response is supposed to have (0 < listitem < 1) for normal players and (0 < listitem < 3) for administrators. But if a player sends a fake response with listitem as 3, they could get access to Hunter. This is an example of how server security can be easily exploited by sending fake packets. So, it's better to safeguard almost everything to be totally safe.