summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorultramage <ultramage@54d463be-8e91-2dee-dedb-b68131a5f0ec>2010-02-13 17:06:31 +0000
committerultramage <ultramage@54d463be-8e91-2dee-dedb-b68131a5f0ec>2010-02-13 17:06:31 +0000
commit6e5cfb6535fa6fddad1df9f313afab6e45a97d19 (patch)
tree76b92c35ba88cd53e7f374ba57a48633e7cf1511
parent6638bbec78c5a1be1881ddf13afdc575840aa96f (diff)
downloadhercules-6e5cfb6535fa6fddad1df9f313afab6e45a97d19.tar.gz
hercules-6e5cfb6535fa6fddad1df9f313afab6e45a97d19.tar.bz2
hercules-6e5cfb6535fa6fddad1df9f313afab6e45a97d19.tar.xz
hercules-6e5cfb6535fa6fddad1df9f313afab6e45a97d19.zip
Moved the delitem() call in the custom eAAC coin banker, so that the script aborts _before_ giving zeny, not afterwards.
This fixes an infinite zeny exploit in the npc (bugreport:4057). git-svn-id: https://rathena.svn.sourceforge.net/svnroot/rathena/trunk@14244 54d463be-8e91-2dee-dedb-b68131a5f0ec
-rw-r--r--npc/custom/eAAC_Scripts/banker.txt2
1 files changed, 1 insertions, 1 deletions
diff --git a/npc/custom/eAAC_Scripts/banker.txt b/npc/custom/eAAC_Scripts/banker.txt
index 8ed9cf87b..a51b77206 100644
--- a/npc/custom/eAAC_Scripts/banker.txt
+++ b/npc/custom/eAAC_Scripts/banker.txt
@@ -161,8 +161,8 @@ prontera,155,188,3 script Zacariath Madhat 872,{
menu "Yes, I want to exchange this much",-,"No, I want to exchange something else",L_CoinZeny,"No, I want to input another number",L_Inputing,"No, I dont want to exchange anything",L_Menu;
next;
set @price,getarg(1)*@coinamount;
- set Zeny,Zeny+@price;
delitem getarg(0),@coinamount;
+ set Zeny,Zeny+@price;
mes @npcname$;
mes "There we go, here's your money";
next;