We found few cheated records on our server but the players dont have any loginname or nickname.
Seems they have just a blank name.
Screenshot
If we try to delete these records we just get this error ...
Code: Select all
[XASECO Warning] {RASP_ERROR} Could not remove time(s)! ()
sql = DELETE FROM rs_times WHERE challengeID=325 AND playerID=0
[XASECO Warning] Could not remove record! ()
sql = DELETE FROM records WHERE ChallengeId=325 AND PlayerId=0
Our temp solution:
we added in plugin.dedimania.php after line 371 ->
Code: Select all
$check_nickname = stripColors($player->nickname);
if ($check_nickname == '') {
$aseco->client->query('Kick', $player->login);
}
Is there any news about these hack/injection and how can we prevent this?
So long L3cKy