Quote:
Originally posted by TifaKhan
(could you explain what a security hole is?)
|
Sometimes scripters put event blocks in the CNPC that look like this:
NPC Code:
if(actionserverwarp){
//warp the player
}
These blocks catch triggers that can be sent from the clientside portions of NPCs. Often these triggers include information about how the player is to be warped - the worst case is where the
account name of the warped player is specified, because then anybody can warp anybody else just by sending an artificial trigger.
This is only one type of security hole, but it's the one that's most likely to be relevant in your case.