xinyin025/TravianZ
1
0
Fork 0
mirror of https://github.com/Shadowss/TravianZ.git synced 2026-08-14 07:11:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix some atomic exploit

Browse Source 
Fix some atomic exploit
This commit is contained in:
novgorodschi catalin
2026-08-13 11:51:54 +03:00
parent 7bad451a83
commit 35f4075734
8 changed files with 708 additions and 62 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Templates/Build/37_land.tpl
+53 -5
View File
@@ -36,11 +36,59 @@
}
$wwMultiplier = $wwFactor / 0.25; // 1.0 fara Waterworks, 1.5 la nivel maxim
if (isset($_GET['gid']) && $_GET['gid'] == 37 && isset($_GET['del']) && $database->getOasisField($_GET['del'], 'owner') == $session->uid) {
$units->returnTroops($village->wid, 1);
$database->removeOases($_GET['del']);
header("Location: build.php?id=" . $id . "&land");
exit;
if (
isset($_GET['gid']) &&
(int)$_GET['gid'] === 37 &&
isset($_GET['del'])
) {
$oasisWref = (int)$_GET['del'];
/*
* Verificam server-side ca:
*
* 1. oaza exista;
* 2. apartine jucatorului;
* 3. este cucerita de SATUL CURENT.
*
* Nu este suficient doar owner == session uid deoarece un jucator
* poate avea mai multe sate si mai multe oaze.
*/
$oasisOwner = (int)$database->getOasisField(
$oasisWref,
'owner'
);
$oasisConquered = (int)$database->getOasisField(
$oasisWref,
'conqured'
);
if (
$oasisWref > 0 &&
$oasisOwner === (int)$session->uid &&
$oasisConquered === (int)$village->wid
) {
/*
* FOARTE IMPORTANT:
*
* Returnam doar trupele din OAZA SELECTATA.
*
* returnTroops($village->wid, 1) NU trebuie folosit aici,
* deoarece acela proceseaza toate oazele satului.
*
* Functia are lock per oasis si re-citeste DB dupa lock.
*/
$units->returnOasisTroops($oasisWref);
/*
* Dupa ce reinforcement-urile au fost returnate,
* oaza este eliberata.
*/
$database->removeOases($oasisWref);
}
header("Location: build.php?id=" . $id . "&land");
exit;
}
// Explicit lookup, instead of the original repetitive switch: