xinyin025/TravianZ
1
0
Fork 0
mirror of https://github.com/Shadowss/TravianZ.git synced 2026-07-21 20:16:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fixed an exploit in the market

Browse Source 
+Fixed an exploit that permitted to gain an infinite amount of resources
This commit is contained in:
iopietro
2018-04-21 17:53:59 +02:00
parent 19dfd345f6
commit e9def19bd9
2 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
GameEngine/Database.php
+3 -3
View File
@@ -5264,8 +5264,8 @@ References: User ID/Message ID, Mode
Made by: Dzoki
***************************/
function getMarketField($vref, $field, $use_cache = true) {
list($vref, $field) = $this->escape_input($vref, $field);
function getMarketField($vref, $id, $field, $use_cache = true) {
list($vref, $id, $field) = $this->escape_input($vref, $id, $field);
// first of all, check if we should be using cache and whether the field
// required is already cached
@@ -5273,7 +5273,7 @@ References: User ID/Message ID, Mode
return $cachedValue;
}
$q = "SELECT * FROM " . TB_PREFIX . "market where vref = '$vref' LIMIT 1";
$q = "SELECT * FROM " . TB_PREFIX . "market WHERE id = $id AND vref = $vref";
$result = mysqli_query($this->dblink,$q);
$dbarray = mysqli_fetch_array($result);