mirror of
https://github.com/mangosfour/server.git
synced 2025-12-13 13:37:05 +00:00
[8848] Fixed bidding on auctions below starting bid
This was possible by using cheating tools only; the client denies such actions without sending CMSG_AUCTION_PLACE_BID. Thanks to leak for reporting this vulnerability.
This commit is contained in:
parent
166c4feaca
commit
b4ce8020e7
2 changed files with 2 additions and 2 deletions
|
|
@ -323,7 +323,7 @@ void WorldSession::HandleAuctionPlaceBid( WorldPacket & recv_data )
|
|||
}
|
||||
|
||||
// cheating
|
||||
if(price <= auction->bid)
|
||||
if(price <= auction->bid || price < auction->startbid)
|
||||
return;
|
||||
|
||||
// price too low for next bid if not buyout
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue