Author Topic: New Knight Exploit  (Read 715 times)

Lann

  • The Lost
  • Full Member
  • ***
  • Posts: 232
  • Karma: +16/-3
    • View Profile
New Knight Exploit
« on: May 18, 2016, 10:35:46 PM »
So some asshole by the name of Sin Sack 罰 accepted a Knight Offer of ONE soldier and then managed to mobilize the ENTIRE 200+ militia of Magatsu Tama out of the town, break fealty, and leave.   Oh, and they left a cute little message:


Hello I am Sin Sack (Punishment)
Please kill me.
I don't want to live anymore.
✋ ☟✌❄☜👎 💣✡ ☹✋☞☜ ☞⚐☼ ✌ ☹⚐☠☝ ❄✋💣☜📬
✋ 💧☟⚐🕆☹👎 ⚐☞ 👎✋☜👎 ✌ ☹⚐☠☝ ❄✋💣☜ ✌☝⚐📪 👌🕆❄ ☝⚐👎 💧☜☠❄ 💣☜ ❄⚐ ☹✋✞☜ ⚐☠👍☜ ✌☝✌✋☠📬
🏱☹☜✌💧☜ ☜☠👎 💣☜📬

I know by looking at my permissions that him mobilizing the militia shouldn't be possible at all and yet here we are.  I'm calling bullshit and saying this guy is exploiting some kind of bug.
« Last Edit: May 19, 2016, 12:40:14 AM by Lann »

Tom

  • Head Developer
  • Administrator
  • Hero Member
  • *****
  • Posts: 6324
  • Karma: +102/-15
    • View Profile
    • Might & Fealty
Re: New Knight Exploit
« Reply #1 on: May 19, 2016, 10:36:03 PM »
I've contacted him by mail, let's see what he says.

Weaver

  • The Lost
  • Full Member
  • ***
  • Posts: 234
  • Karma: +52/-39
    • View Profile
Re: New Knight Exploit
« Reply #2 on: May 20, 2016, 02:29:19 AM »
I contacted him in-game, and at first he seemed sort of reasonable, but then literally sent me, out of character, (he prefixed it with OOC:) that his life is over and that god has sent him to... I dunno.

I am pretty sure this dude's a troll.

Daleborn

  • Jr. Member
  • **
  • Posts: 41
  • Karma: +0/-0
  • All the Dales!
    • View Profile
Re: New Knight Exploit
« Reply #3 on: May 20, 2016, 02:53:10 AM »
Yup this guy has done the same to Ascalon.
Born of the Dales, 'nuff said.
My fanfic: https://m.fanfiction.net/s/11968618/1/

Tom

  • Head Developer
  • Administrator
  • Hero Member
  • *****
  • Posts: 6324
  • Karma: +102/-15
    • View Profile
    • Might & Fealty
Re: New Knight Exploit
« Reply #4 on: May 20, 2016, 07:59:41 AM »
His mail answer only says that he noticed he could recruit the whole army.

According to the log, there is a simple POST for settlement 2913, Magatsu Tama. Permissions should be checked on this request. If someone wants to check the code, the request was

POST /en/settlement/2913/soldiers

which you should find in https://github.com/tvogt/mightandfealty/blob/master/src/BM2/SiteBundle/Controller/SettlementController.php - method SoldiersAction starting line 145. I don't have time to check it right now. All I see at a glance is that it DOES check if you have the right permissions (the dispatcher->gateway call at the start).
« Last Edit: May 20, 2016, 08:07:39 AM by Tom »

Weaver

  • The Lost
  • Full Member
  • ***
  • Posts: 234
  • Karma: +52/-39
    • View Profile
Re: New Knight Exploit
« Reply #5 on: May 20, 2016, 12:54:40 PM »
I looked at it, but I didn't find anything out of the ordinary. Strange thing yet is, a friend of mine created a character in Tetsuyama, and said he could recruit the whole garrison as well. I asked them, and they also say that the permissions for that should not have been present.

'course, I tried to recreate it, but could not achieve same results.

Either way, what about the guy? We just gonna let him do whatever he wants? He has been long enough around to know what he is doing, and I can almost guarantee his one and only objective is to troll.

Quote
✋ ☟✌❄☜👎 💣✡ ☹✋☞☜ ☞⚐☼ ✌ ☹⚐☠☝ ❄✋💣☜📬
✋ 💧☟⚐🕆☹👎 ⚐☞ 👎✋☜👎 ✌ ☹⚐☠☝ ❄✋💣☜ ✌☝⚐📪 👌🕆❄ ☝⚐👎 💧☜☠❄ 💣☜ ❄⚐ ☹✋✞☜ ⚐☠👍☜ ✌☝✌✋☠📬
🏱☹☜✌💧☜ ☜☠👎 💣☜📬
OOC: I HATED MY LIFE FOR A LONG TIME.
I SHOULD OF DIED A LONG TIME AGO, BUT GOD SENT ME TO LIVE ONCE AGAIN.
PLEASE END ME.

« Last Edit: May 20, 2016, 01:01:32 PM by Weaver »

Tom

  • Head Developer
  • Administrator
  • Hero Member
  • *****
  • Posts: 6324
  • Karma: +102/-15
    • View Profile
    • Might & Fealty
Re: New Knight Exploit
« Reply #6 on: May 20, 2016, 02:19:04 PM »
I'm communicating with him by mail. Let me manage first.

Weaver

  • The Lost
  • Full Member
  • ***
  • Posts: 234
  • Karma: +52/-39
    • View Profile
Re: New Knight Exploit
« Reply #7 on: May 20, 2016, 04:08:49 PM »
Alright, but I already sent a knight to go after him. If you say you'll take care of it without me needing to commit resources, I'll call them back.

EDIT: Also, apparently, reclaim does not work, or else this situation could be rectified immediately.
« Last Edit: May 20, 2016, 08:32:35 PM by Weaver »

Insanegame27

  • Full Member
  • ***
  • Posts: 144
  • Karma: +7/-3
  • I am the Bopmaster, master of Bops.
    • View Profile
Re: New Knight Exploit
« Reply #8 on: May 21, 2016, 01:18:14 PM »
Alright, but I already sent a knight to go after him. If you say you'll take care of it without me needing to commit resources, I'll call them back.

EDIT: Also, apparently, reclaim does not work, or else this situation could be rectified immediately.
Reclaim works by the date that the soldiers were put on offer, not when the offer was accepted. BTW Tom, any chance of that ever changing?
Now I have a mental image of horses lined up in a goods factory, building things on an assembly line.

Weaver

  • The Lost
  • Full Member
  • ***
  • Posts: 234
  • Karma: +52/-39
    • View Profile
Re: New Knight Exploit
« Reply #9 on: May 21, 2016, 01:38:08 PM »
No, it doesn't work.

Tom

  • Head Developer
  • Administrator
  • Hero Member
  • *****
  • Posts: 6324
  • Karma: +102/-15
    • View Profile
    • Might & Fealty
Re: New Knight Exploit
« Reply #10 on: May 22, 2016, 02:22:06 PM »
Reclaim works by the date that the soldiers were put on offer, not when the offer was accepted. BTW Tom, any chance of that ever changing?

Agree, it should be changed. But I have zero resources right now, someone could go on github, fix it (should be like 3 lines of code) and make a pull request.

Weaver

  • The Lost
  • Full Member
  • ***
  • Posts: 234
  • Karma: +52/-39
    • View Profile
Re: New Knight Exploit
« Reply #11 on: May 28, 2016, 04:38:10 PM »
This guy is also exploiting bugs.