Accept shutdown p2p command from

[chairman 0]

crash server channel, my syserr

Accept shutdown p2p command from 37.135.145.101

37.135.145.101 my server ip

firewall fix p2p by .Infinity

[ds_aim 239]

Metod 1: Api tool(gm mode)

Metod 2: Shutdown command

[chairman 0]

@ds_aim gm mode? config

 

ADMINPAGE_PASSWORD: deadwarriors
ADMIN_PAGE_PASSWORD: deadwarriors
ADMINPAGE_IP: localhost
ADMINPAGE_IP1: 163.52.189.54 -- my side ip 
ADMINPAGE_IP2: localhost
ADMINPAGE_IP3: localhost

[ds_aim 239]

2 minutes ago, chairman said:

@ds_aim gm mode? config

 

ADMINPAGE_PASSWORD: deadwarriors
ADMIN_PAGE_PASSWORD: deadwarriors
ADMINPAGE_IP: localhost
ADMINPAGE_IP1: 163.52.189.54 -- my side ip 
ADMINPAGE_IP2: localhost
ADMINPAGE_IP3: localhost

It's a source exploit. You must fix from source.

[chairman 0]

@up how?

[Ken 891]

You have to become admin to send those commands. If you're using a weak password, everyone can guess that password and access to your server.

1. Try to use a strong password for adminpage.
2. Make a log system for those commands in input.cpp.

If that guy send SHUTDOWN_ONLY, you can see a log in log.sql ~ It's called "SHUTDOWN". (It's only make sure about it's coming from p2p or gm commands)

Kind Regards ~ Ken

[chairman 0]

ok?

config.cpp

new password

 

std::string    g_stAdminPagePassword = "2eOW2E34f5O4E1";

 

input.cpp

       

 //else if (!stBuf.compare("SHOWMETHEMONEY"))

	        else if (stBuf == g_stAdminPagePassword)

	        {

	            if (!IsEmptyAdminPage())

	            {

	                if (!IsAdminPage(inet_ntoa(d->GetAddr().sin_addr)))

	                {

	                    char szTmp[64];

	                    snprintf(szTmp, sizeof(szTmp), "WEBADMIN : Wrong Connector : %s", inet_ntoa(d->GetAddr().sin_addr));

	                    stResult += szTmp;

	                }

	                else

	                {

	                    d->SetAdminMode();

	                    stResult = "UNKNOWN";

	                }

	            }

	            else

	            {

	                d->SetAdminMode();

	                stResult = "UNKNOWN";

	            }

	        }