Merge pull request #188 from cosme12/patch-15

Quest exploit fix
This commit is contained in:
Shadow
2015-08-30 10:12:07 +03:00
+2 -1
View File
@@ -47,6 +47,7 @@ if (isset($qact)){
if ($check_quest==$qact) { if ($check_quest==$qact) {
//avoid hacking gold, resources or reward -- added by Ronix //avoid hacking gold, resources or reward -- added by Ronix
}else { }else {
if ($qact > $_SESSION['qst'] || !is_numeric($qact)){
switch($qact) { switch($qact) {
case 'enter': case 'enter':
$database->updateUserField($_SESSION['username'],'quest','1',0); $database->updateUserField($_SESSION['username'],'quest','1',0);
@@ -400,7 +401,7 @@ if (isset($qact)){
$gold+=20; $gold+=20;
$database->updateUserField($_SESSION['username'],'gold',$gold,0); $database->updateUserField($_SESSION['username'],'gold',$gold,0);
break; break;
} }}
} }
} }