Hey guys,
I found a serious problem in my server. I want to confirm if this is only happening to me or if it's happening to everyone.
When I create an account via SQL query I can login with any password as long as the AccountName exists. I tried logging in with existing AccountName and no password but it returns with "Please enter your password". I tried logging in with many combinations of passwords for the same account and they all allow me to log into the game.
Does this happen for you as well?
Here is the SQL query I'm using provided by leechclown in his tutorial.
- - - Updated - - -
I just deleted all of my databases and restored them with the .bak files provided by someone on the forum. I'm still able to log into accounts with any password. For example..
I created this account:
AccountName: test
Password: test123
I can login with any password like 123test, bob, sdkfljasd, 94m8q3cura, etc. No matter what I enter in the password field of client I can login as long as I have the AccountName right. Can someone else please confirm this for me?
I found a serious problem in my server. I want to confirm if this is only happening to me or if it's happening to everyone.
When I create an account via SQL query I can login with any password as long as the AccountName exists. I tried logging in with existing AccountName and no password but it returns with "Please enter your password". I tried logging in with many combinations of passwords for the same account and they all allow me to log into the game.
Does this happen for you as well?
Here is the SQL query I'm using provided by leechclown in his tutorial.
Code:
USE [DNMembership]
GO
DECLARE @return_value int
EXEC @return_value = [dbo].[P_AddAccount]
@nvcAccountName = N'USERNAME',
@inyAccountLevelCode = 100,
@inyCharacterCreateLimit = 4,
@inyCharacterMaxCount = 4,
@dt2LastLoginDate = NULL,
@vchLastLoginIP = NULL,
@IntLastSessionID = NULL,
@vchJoinIP = NULL,
@inyPublisherCode = 4,
@inyGenderCode = NULL,
@DaTBirthDate = NULL,
@vchPassphrase = N'PASSWORT',
@inyNationalityCode = NULL,
@inyChannelPartnerCode = NULL
SELECT 'Return Value' = @return_value
GOI just deleted all of my databases and restored them with the .bak files provided by someone on the forum. I'm still able to log into accounts with any password. For example..
I created this account:
AccountName: test
Password: test123
I can login with any password like 123test, bob, sdkfljasd, 94m8q3cura, etc. No matter what I enter in the password field of client I can login as long as I have the AccountName right. Can someone else please confirm this for me?