Login
User Name:

Password:



Register
Forgot your password?
Vote for Us!
tintin++ ogg sound player script for linux
Author: Robert Smith
Submitted by: Vladaar
6Dragons ogg Soundpack
Author: Vladaar
Submitted by: Vladaar
6Dragons 4.4
Author: Vladaar
Submitted by: Vladaar
LoP 1.46
Author: Remcon
Submitted by: Remcon
LOP 1.45
Author: Remcon
Submitted by: Remcon
Users Online
CommonCrawl, DotBot, Yandex

Members: 0
Guests: 9
Stats
Files
Topics
Posts
Members
Newest Member
481
3,739
19,386
625
OmarHarrim
Today's Birthdays
There are no member birthdays today.
Related Links
» SmaugMuds.org » Bugfix Lists » SWR FUSS Bugfix List » [Bug] Empower command does no...
Forum Rules | Mark all | Recent Posts

[Bug] Empower command does not validate the user's bestowments first
< Newer Topic :: Older Topic >

Pages:<< prev 1 next >>
Post is unread #1 Oct 29, 2006, 1:24 pm
Go to the top of the page
Go to the bottom of the page

Samson
Black Hand
GroupAdministrators
Posts3,643
JoinedJan 1, 2002

Bug: Empower command does not validate the user's bestowments first
Danger: Medium - Game exploit. Target can grant the user any ability once they are empowered.
Found by: Banner
Fixed by: Banner

---

clans.c, do_empower

Locate:
   if( arg2[0] == '\0' || !str_cmp( arg2, "list" ) )
   {
      ch_printf( ch, "Current bestowed commands on %s: %s.\r\n", victim->name, victim->pcdata->bestowments );
      return;
   }


Below that, add:
   if( str_cmp( ch->name, clan->leader ) && !str_cmp( ch->name, clan->number1 ) )
   {
      if( !is_name( arg2, ch->pcdata->bestowments ) )
      {
         send_to_char( "&RI don't think you're even allowed to do that.&W\r\n", ch );
         return;
      }
   }


Anyone with the empower ability in a clan has the ability to empower others, even if they themselves do not possess the abilities. Once this is done, the person who was just empowered can turn around and do the same for the first person.
       
Pages:<< prev 1 next >>