Fix a login exploit.

Make a list of GUIDs that purpose is which characters can login per account. This fixes an exploit that player can login (but shouldn't) with packet manipulation. Signed-off-by: Anubisss <[email protected]>
2011-04-01 03:11:57 +02:00
parent 24dae7dd9a
commit 5fe6c225e2
2 changed files with 23 additions and 0 deletions
@@ -882,6 +882,19 @@ class WorldSession
        void LogUnexpectedOpcode(WorldPacket *packet, const char* status, const char *reason);
        void LogUnprocessedTail(WorldPacket *packet);

+        // EnumData helpers
+        bool CharCanLogin(uint32 LowGUID)
+        {
+            if (find(m_AllowedCharsToLogin.begin(),
+                     m_AllowedCharsToLogin.end(),
+                     LowGUID) == m_AllowedCharsToLogin.end())
+                return false;
+            return true;
+        }
+        // this stores the GUIDs of the characters who can login
+        // characters who failed on Player::BuildEnumData shouldn't login
+        std::list<uint32> m_AllowedCharsToLogin;
+
        uint32 m_GUIDLow;                                   // set loggined or recently logout player (while m_playerRecentlyLogout set)
        Player *_player;
        WorldSocket *m_Socket;