Reply to thread

Message

<blockquote data-quote="Funsolit" data-source="post: 350507" data-attributes="member: 14086">So, while i was trying out stuff on my hotel, some guy came in with the name &quot;ªnoobª&quot; and he was like &quot;Try a command on me&quot; and i did, and that does not work as most emulators won't recognise those characters.So what is the exploit? Well, if some user comes in your hotel and starts advertising you can't do anything about it until you restart the emulator and manualy add him to the ban list, and no one wants to do that so.+ On some hotels, when you enter the client it offers you the &quot;:flagme&quot; aka change name function, and if some hotels have disabled that because it's exploitable then people can activate it by registereing with an unknown name for the emulator.Screen shots of it in &quot;action&quot;<img src="https://i.gyazo.com/801b02bbb179d42ef2b48d1ffcd343a2.png" alt="" class="fr-fic fr-dii fr-draggable " style="" /> <img src="https://i.gyazo.com/0121aa0efc01d3b0d72b726e0806ce01.png" alt="" class="fr-fic fr-dii fr-draggable " style="" />And here is the fix for it...Go in app and open class.usersand find the validname function which looks like this for most revcms users[PHP] final public function validName($username)&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; if(strlen($username) &lt;= 25 &amp;&amp; ctype_alnum($username))&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; return true;&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; return false;&nbsp;&nbsp; &nbsp; &nbsp; }&nbsp; [/PHP]And you replace that with this.[PHP]&nbsp; final public function validName($username)&nbsp; {&nbsp; &nbsp; if(strlen($username) &lt;= 25 &amp;&amp; preg_match(&quot;/^[a-zA-Z0-9]+$/&quot;, $username)) &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return true;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; return false; }&nbsp; [/PHP]This code will only allow letters from a-z and numbers. So if you want people to register with . - and things like that, you will need to change /^[a-zA-Z0-9]+$/ to something else, you can easily learn how to customisze that by googling preg_match allowing different characters.Thx to 3M1L for helping me with this <img src="/styles/default/xenforo/smilies/emojione/smile.png"&nbsp; class="smilie" loading="lazy" alt=":)" title="Smile&nbsp; &nbsp; :)" data-shortname=":)" /></blockquote>

[QUOTE="Funsolit, post: 350507, member: 14086"] So, while i was trying out stuff on my hotel, some guy came in with the name "ªnoobª" and he was like "Try a command on me" and i did, and that does not work as most emulators won't recognise those characters. So what is the exploit? Well, if some user comes in your hotel and starts advertising you can't do anything about it until you restart the emulator and manualy add him to the ban list, and no one wants to do that so. + On some hotels, when you enter the client it offers you the ":flagme" aka change name function, and if some hotels have disabled that because it's exploitable then people can activate it by registereing with an unknown name for the emulator. [B]Screen shots of it in "action"[/B] [IMG]https://i.gyazo.com/801b02bbb179d42ef2b48d1ffcd343a2.png[/IMG] [IMG]https://i.gyazo.com/0121aa0efc01d3b0d72b726e0806ce01.png[/IMG] And here is the fix for it... Go in app and open class.users and find the validname function which looks like this for most revcms users [B][PHP] final public function validName($username) { if(strlen($username) <= 25 && ctype_alnum($username)) { return true; } return false; } [/PHP] And you replace that with this. [PHP] final public function validName($username) { if(strlen($username) <= 25 && preg_match("/^[a-zA-Z0-9]+$/", $username)) { return true; } return false; } [/PHP][/B] This code will only allow letters from a-z and numbers. So if you want people to register with . - and things like that, you will need to change /^[a-zA-Z0-9]+$/ to something else, you can easily learn how to customisze that by googling preg_match allowing different characters. Thx to [I]3M1L[/I] for helping me with this :) [/QUOTE]

Verification

Reply to thread

Connect with us

Newest members