summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)AuthorFilesLines
2019-01-10kill idle connections to login-server after a whilegumi1-1/+20
2019-01-10limit login requests to 1 per ip per X secondsgumi1-1/+32
2019-01-10avoid filling the fifo queue in char server for new authenticationsgumi1-10/+22
There can only be one connection per account id at any given time, so we can safely recycle old fifo entries with the same id
2019-01-10completely remove the auth fifo queue in login servergumi5-55/+0
it isn't even being used anymore
2019-01-10store login-server auth details directly in the sessiongumi1-18/+8
2018-12-30pre-send the auth details to map servers instead of blindly trusting 0x0072gumi9-55/+206
2018-12-30make char server notify login server of successful authgumi3-143/+139
2018-12-30Improve login-server loggingFreeyorp1-100/+100
Sends many important messages to both stdout and to log, rather than one or the other, which required often time consuming reconstruction. Change the format of many logs so that when logging the IP of the char-server, rather than the IP of the source of the request, it should be clearer that this is what is meant. Log the IP in many more cases, including for an incorrect password in a failed login attempt, in a format suitable for fail2ban or other anti-bruteforce measures. Fix many miscellaneous grammatical or spelling mistakes.
2018-12-30Improve char-server loggingFreeyorp2-49/+55
Sends many important messages to both stdout and to log, rather than just one or the other, which required often time consuming reconstruction. Also shout on many more cases of unusual behaviour, and log the IP in a format suitable for fail2ban or other anti-bruteforce measures. When unusual unauthenticated behaviour is detected, close the connection immediately, rather than just skipping the current packet.
2018-12-30Fixed a very old login/char authentication exploitFreeyorp1-0/+23
See: https://github.com/eathena/eathena/commit/d1fdddf36d913b7c85dcb9ed186a092a43fcec46 We *really* need a more stable base. This was literally fixed by upstream over a decade ago.
2018-12-18add player heal packetsv18.12.18gumi4-3/+54
2018-12-13add support for sending player HP for protocol >= 9gumi2-11/+47
2018-12-06add a missing include in fdgumi1-0/+1
2018-11-10add support for CMSG_ONLINE_LISTgumi1-1/+43
2018-11-10fix the previous commit.... *facepalm*gumi1-1/+1
2018-11-10don't display (GM) for non-60 in the txt online listv18.11.10gumi1-3/+16
2018-06-19fix the previous patchgumi1-0/+1
2018-06-19automatically fix corrupt parties on bootv18.6.19gumi1-0/+29
2018-04-05sorry! stop yelling at me!gumi1-0/+2
2018-04-05gcc doesn't like it when we initialize in the wrong ordergumi1-1/+1
2018-04-05make sessions expire after 5 minutes of being unreachablegumi2-10/+39
2018-04-05preemptively send auth details to char servergumi2-15/+53
why wasn't this already the case? o_o
2018-04-03fix a possible race condition between login and char servergumi1-10/+11
2018-04-03relay the actual char login error instead of a hardcoded 0x42gumi2-2/+4
2018-04-03always send a 0x2713 to char server when a 0x2712 is receivedgumi1-3/+3
this should fix the char server freeze bug
2018-03-23fix a bug introduced by wushin, which freeyorp highlighted with his previous ↵v18.3.23.1Tezer1-17/+2
patch
2018-03-23automatically de-attach freed NPCsv18.3.23gumi2-12/+61
2018-03-23Fix NPC script softlockv18.3.22Freeyorp1-0/+11
When an NPC called destroy; from an attached script, npc_id, and associated state, was not properly cleared. This meant that the server considered the PC to still be in conversation, preventing many actions including walking, but with an invalid NPC. This clears state for the specific case of the a PC attached to the script instance that called destroy. It is still not safe to call destroy; if other players may be attached to it.
2018-03-18skip @hidden players (such as bots) when iterating with @hugogumi1-1/+19
2018-03-11don't send base_level if player is a botgumi1-3/+3
2018-03-09validate name size before sending custom mob namesgumi1-4/+6
2018-03-08fix some out-of-memory reads in script builtinsgumi1-3/+3
2018-03-08fix ScriptState uninitialized valuesgumi1-0/+4
2018-03-06whoops, my badgumi1-0/+2
2018-03-05fix gdb tests for python3gumi2-2/+6
2018-03-05don't send actual gm level to old clientsgumi1-19/+30
2018-03-05fix indentation in option.hppgumi1-8/+8
2018-03-05ensure the player looks dead if dead while warpinggumi1-0/+8
2018-03-05un-deprecate operator[] on pseudo-stringsgumi2-2/+0
There's no reason for it to be deprecated in the first place
2018-03-05make OMATCH use actual values instead of true/false (too lazy to just remove ↵gumi1-3/+3
it completely)
2018-03-05remove invalid warnings from warnings.hppgumi1-2/+2
2018-03-04forcefully send a name request reply for mobs with custom namesgumi1-5/+26
2018-03-04ignore phony npc event calls (~)gumi1-0/+3
2018-03-04allow @goto and @chareffect on higher GM levels if not hiddengumi1-2/+2
2018-03-04send base level where appropriategumi1-1/+4
2018-03-03don't blindly trust event npc namegumi1-1/+8
2018-03-03add missing vector include in script-persistgumi1-0/+1
2018-02-17remove some useless tests from option_testgumi1-11/+0
2018-02-17use -ld-fuse=gold for gcc in travisgumi1-4/+0
2018-02-17remove unused variablesgumi4-4/+2