mirror of
https://github.com/mangosfour/server.git
synced 2025-12-13 13:37:05 +00:00
[8848] Fixed bidding on auctions below starting bid
This was possible by using cheating tools only; the client denies such actions without sending CMSG_AUCTION_PLACE_BID. Thanks to leak for reporting this vulnerability.
This commit is contained in:
parent
166c4feaca
commit
b4ce8020e7
2 changed files with 2 additions and 2 deletions
|
|
@ -323,7 +323,7 @@ void WorldSession::HandleAuctionPlaceBid( WorldPacket & recv_data )
|
||||||
}
|
}
|
||||||
|
|
||||||
// cheating
|
// cheating
|
||||||
if(price <= auction->bid)
|
if(price <= auction->bid || price < auction->startbid)
|
||||||
return;
|
return;
|
||||||
|
|
||||||
// price too low for next bid if not buyout
|
// price too low for next bid if not buyout
|
||||||
|
|
|
||||||
|
|
@ -1,4 +1,4 @@
|
||||||
#ifndef __REVISION_NR_H__
|
#ifndef __REVISION_NR_H__
|
||||||
#define __REVISION_NR_H__
|
#define __REVISION_NR_H__
|
||||||
#define REVISION_NR "8847"
|
#define REVISION_NR "8848"
|
||||||
#endif // __REVISION_NR_H__
|
#endif // __REVISION_NR_H__
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue