Big problem in points..

[Elexonic]

Today all my accounts have 585 premium points .. ALL accounts...

Using debian 6.0
Using modern account 244 edited.
Using thunderiom server..
Using password hard to database..
In my ot god no enter ingame.. [ no give points by god...]

How could this happen?
more than two months and never happened ..

 

[Summ]

Select data folder, push in notepad++, search all files for your premium points function and you can then exclude a script weakness as the reason for this.

 

[Elexonic]

Summ i don`t understand :S
Can you explain my pleased?
And if you know comand for change password in phpmyadmin for other... thanks you.

 

[Summ]

You can search all of your files for the string "doPlayerAddPremiumPoints" or whatever function you use for that and you will find all scripts that add points.
Maybe there is a weakness in one of them.

 

[Elexonic]

I only have two scritp give points for

function onAdvance(cid, skill, oldlevel, newlevel)
local points = 5
local name = getCreatureName(cid)
if(getPlayerStorageValue(cid, 99966) ~= 1 and skill == SKILL__LEVEL and newlevel >= 250) then
local p = "UPDATE `accounts` SET `premium_points` = `premium_points` + "..points.." where id="..getPlayerAccountId(cid)
db.executeQuery(p)
setPlayerStorageValue(cid, 99966, 1)
doBroadcastMessage("Congratulations " .. name .. " advanced on level 250 and received 5 Premium Points !", MESSAGE_STATUS_CONSOLE_RED)

end
return TRUE
end

and this..

local config = { points = 3,
skillStor = 56364,
level = 150,
skills = {
[SKILL__MAGLEVEL] = {level = 103, vocs = {1, 2, 5, 6, 9, 10}},
[SKILL_FIST] = {level = 110, vocs = {4, 8, 12}},
[SKILL_SWORD] = {level = 113, vocs = {4, 8, 12}},
[SKILL_CLUB] = {level = 110, vocs = {4, 8, 12}},
[SKILL_AXE] = {level = 110, vocs = {4, 8, 12}},
[SKILL_SHIELD] = {level = 110, vocs = {4, 8, 12}},
[SKILL_DISTANCE] = {level = 115, vocs = {3, 7, 11}}
}
}

function onAdvance(cid, skill, oldlevel, newlevel)
if(getPlayerStorageValue(cid, config.skillStor) ~= 1 and getPlayerLevel(cid) >= config.level) then --Check storage and level
if(config.skills[skill] ~= nil) then
if(table.containsNum(getPlayerVocation(cid), config.skills[skill].vocs)) then --Check if the vocation used for this skill is an acceptable one
if(newlevel >= config.skills[skill].level) then --Check if the player has the required skill
db.executeQuery("UPDATE `accounts` SET `premium_points` = `premium_points` + " .. config.points .. " where id=" .. getPlayerAccountId(cid))
doBroadcastMessage("Congratulations " .. getCreatureName(cid) .. " advanced on skill and received 3 Premium Points!", MESSAGE_STATUS_CONSOLE_RED)
setPlayerStorageValue(cid, config.skillStor, 1)
doWriteLogFile("./data/logs/puntosskill.log", "Success: " .. getCreatureName(cid).. " gain 3 points for skill.")
end
end
end
end
return TRUE
end

But i have a log in skill level.. and no gain point none in two days..

- - - Updated - - -

I thinks is a sql inyection....

 

[Elexonic]

This bu reproduce again... i using lucasferaz modern account fixed..
idk how can get points.

 

[Elexonic]

buuump!!! HELP PLEASED

 

[Xon vanetta]

does you website prove any points selling/gaining?

 

[Elexonic]

No i think no.. I using this version.. http://otland.net/f118/fixed-modern-aac-tibiarl-layout-169410/
and before.. i have other modern account clean..