Hospital time bug FIX here!

[chaoswar4u]

I was informed to a bug recently regarding hospital time. The basics are a member may go to hospital and if they have mass hospital time and wish to get it lowered they use the link attacklost.php along with any members ID and it will reduce them to that random hospital. A very good way to lower hospital time for free - EXP loss for cheating.

Anyways to fix.

Go to attack.php and find

 

$youdata['hp']=0;

$_SESSION['attacklost']=1;

$db->query("UPDATE users SET hp=0 WHERE userid=$userid");

print "<form action='attacklost.php?ID={$_GET['ID']}' method='post'><input type='submit' value='Continue' />";

 

Replace with

 

$youdata['hp']=0;

$_SESSION['attacklost']=$_GET['ID'];

$db->query("UPDATE users SET hp=0 WHERE userid=$userid");

print "<form action='attacklost.php?ID={$_GET['ID']}' method='post'><input type='submit' value='Continue' />";

 

Go to attacklost.php

 

$_SESSION['attacking']=0;

$_SESSION['attacklost']=0;

$od=$db->query("SELECT * FROM users WHERE userid={$_GET['ID']}");

 

Replace with

 

$_SESSION['attacking']=0;

$od=$db->query("SELECT * FROM users WHERE userid={$_GET['ID']}");

 

Then add where required in attacklost.php

 

if($_SESSION['attacklost'] != $_GET['ID'])

{

print "Cheaters don't get anywhere.";

$_SESSION['attacklost']=0;

$h->endpage();

exit;

}

 

Please let me know if it has a bug but ive tested it twice and works fine unless ive overlooked something adding here.

[Haunted Dawg]

Re: Hospital time bug FIX here!

why not just add in attacklost.php:

unset($_SESSION['attacklost']);

then

if( !isset($_SESSION['attacklost']) )

{

echo 'Cheaters dont get no where.';

$h->endpage();

exit;

}

[POG1]

Re: Hospital time bug FIX here!

echo 'Cheaters dont get no where.';

That would mean cheaters get somewhere ;)

[chaoswar4u]

Re: Hospital time bug FIX here!

Im not here to debate on different ways to do the fix in question. Ive offered one method and a warning to all about the bug. Its upto the member who uses it to either use my way or to adapt it to there needs.

[rockwood]

Attack lost page stuck

actually i m playing a game criminalimpulse from a long time, but these days admin is not interested to run the game

and so many good and old players are feeling very sad due to they are stuck in attack lost bug

we don't have any admins password to change that fields

can u help me in this matter for free from this bug ?

due to this error we are not able to play this game

 

i m pasting the stuck error here

url :- http://www.criminalimpulse.com/attacklost.php

You lost to VorlessDarkChaos.MySQL server has gone away

INSERT INTO events VALUES('',34,UNIX_TIMESTAMP(),0,'Rocket attacked you and lost. [View Log],'combat')

please if u have any solution for remove this horrible bug then you can mail sir

my email ids are [email protected] and [email protected]

Thanks & Regards

Nitin Sharma