release Fix DoS Exploit via [HEADER_CG_CHARACTER_SELECT]

[Black_Rose©]

What Does This Exploit Do?

In simple terms, this exploit is designed to terminate the database process (pid db), which consequently causes the server to shut down.

Fix Overview

While this solution isn't originally mine, it can be helpful if you're experiencing this issue, potentially saving you from extended troubleshooting.

Identifying the Exploit

If your server is being affected by this new exploit, you can expect to find specific error lines in your syslog when the database pid crashes. Look for entries similar to:

This is the hidden content, please

• Sign In
• or
• Sign Up

Implementation of the Fix

To implement the fix, you'll need to make changes in the input_login.cpp file. Follow these steps:

1. Find the Line of Code

   • Search for the line:

• This is the hidden content, please

  • Sign In
  • or
  • Sign Up

   

• Modify the Code

  • Replace the entire line with:

2. This is the hidden content, please

   • Sign In
   • or
   • Sign Up

    

This adjustment ensures that if an invalid player_id is detected during the player load process, the server will log the error and disconnect the offending player immediately, thereby mitigating the DoS attack.

Conclusion

Implementing this fix will help safeguard your server from being affected by the identified exploit, ensuring that your gaming environment remains stable and secure. Always remember, fair competition is essential for the growth and enjoyment of our gaming community.