xinyin025/TravianZ
1
0
Fork 0
mirror of https://github.com/Shadowss/TravianZ.git synced 2026-07-01 10:04:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: super-strange id + 0 query that totally prevents the use of indexes

Browse Source
This commit is contained in:
Martin Ambrus
2017-10-24 09:55:18 +02:00
parent d12be30634
commit aab1010906
4 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
GameEngine/Message.php
+2 -2
View File
@@ -335,7 +335,7 @@ class Message {
// Vulnerability closed by Shadow
$q = "SELECT * FROM ".TB_PREFIX."mdata WHERE owner='".$session->uid."' AND time > ".time()." - 60";
$q = "SELECT * FROM ".TB_PREFIX."mdata WHERE owner='".$session->uid."' AND time > ".(time() - 60);
$res = mysqli_query($GLOBALS['link'],$q) or die(mysqli_error($database->dblink). " query ".$q);
$flood = mysqli_num_rows($res);
if($flood > 5)
@@ -425,7 +425,7 @@ class Message {
// Vulnerability closed by Shadow
if ($security_check) {
$q = "SELECT * FROM ".TB_PREFIX."mdata WHERE owner='".$session->uid."' AND time > ".time()." - 60";
$q = "SELECT * FROM ".TB_PREFIX."mdata WHERE owner='".$session->uid."' AND time > ".time() - 60;
$res = mysqli_query($GLOBALS['link'],$q) or die(mysqli_error($database->dblink). " query ".$q);
$flood = mysqli_num_rows($res);
if($flood > 5)