Fixed an exploit in the Hero's mansion

With this exploit you can release any conquered oasis
This commit is contained in:
Pietro
2018-04-01 18:37:10 +02:00
committed by GitHub
parent 23a6957a7f
commit cfc64aacc8
+1 -1
View File
@@ -3,7 +3,7 @@
Copyright: Travianx Project */
$oasisarray = $database->getOasis($village->wid);
if(isset($_GET['gid']) && $_GET['gid']==37 && isset($_GET['del'])){
if(isset($_GET['gid']) && $_GET['gid']==37 && isset($_GET['del']) && $database->getOasisField($_GET['del'], 'owner') == $session->uid){
if($session->access != BANNED){
$database->removeOases($_GET['del']);
header("Location: build.php?id=".$id."&land");