Issue information

Issue ID
#3680
Status
Fixed
Severity
Critical
Started
Hercules Elf Bot
Oct 25, 2009 20:35
Last Post
Hercules Elf Bot
Oct 25, 2009 20:35
Confirmation
N/A

Hercules Elf Bot - Oct 25, 2009 20:35

Originally posted by [b]BabyIze[/b]
http://www.eathena.ws/board/index.php?autocom=bugtracker&showbug=3680

On buying item through NPC : OnBuyitem by applying WPE to receive buying package
that can transform(Hack) the package's hex into the wanted id.
Then the item can be claimed from the shop without paying.
Because the Server Side neither check this nor protect those Packages.

However, it doesn't happen to normal NPC shops. Right the example script below.

QUOTE
location.gat,100,100,0 shop Shield Shop 90,2102:-1,2104:-1,2106:-1

or
QUOTE
- shop shop_equi -1,2102:-1,2104:-1,2106:-1

location.gat,100,100,5 script Shield Shop 90,{

callshop "shop_equi",0;
end;
}


For the example overhead, the Server Side is going to check buying package and nothing happens.

But for the script below, the problem is when Labels OnBuyitem is set in this script, it is able to duplicate item right the Package that WPE send it back.

Download

Please consider and fix this problem. We hope that you may help us through this case. Thank you

Best regard
Ps. I apologize if my English is incomprehensible

This post has been edited by BabyIze: Oct 25 2009, 06:51 PM