mirror of
https://github.com/mangosfour/server.git
synced 2025-12-13 13:37:05 +00:00
[8848] Fixed bidding on auctions below starting bid
This was possible by using cheating tools only; the client denies such actions without sending CMSG_AUCTION_PLACE_BID. Thanks to leak for reporting this vulnerability.
This commit is contained in:
parent
166c4feaca
commit
b4ce8020e7
2 changed files with 2 additions and 2 deletions
|
|
@ -323,7 +323,7 @@ void WorldSession::HandleAuctionPlaceBid( WorldPacket & recv_data )
|
|||
}
|
||||
|
||||
// cheating
|
||||
if(price <= auction->bid)
|
||||
if(price <= auction->bid || price < auction->startbid)
|
||||
return;
|
||||
|
||||
// price too low for next bid if not buyout
|
||||
|
|
|
|||
|
|
@ -1,4 +1,4 @@
|
|||
#ifndef __REVISION_NR_H__
|
||||
#define __REVISION_NR_H__
|
||||
#define REVISION_NR "8847"
|
||||
#define REVISION_NR "8848"
|
||||
#endif // __REVISION_NR_H__
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue