Fix AuthServer DLL/MSSQL to request user correct password
Budget: $10 – $30 USD
So, I have this gameserver running, but I can't make it public because right now if the play exe a .bat with this parameter "bless.exe BlessUnleashedLauncher -authaddr=192.168.200.100:9900 -LoginID=anyusername" he will have access to the any login available. If the login doesnt exist, it will be created without a password aswell. So anyone can access all accounts and characters just by guessing the login.
I can send the databases .bak to check, aswell as the BLAuthServer.exe and BLAuthserver.dll where these informations are stored. I guess there is some way to block the login without password just decompiling the .dll with dnSpy and add some code for it to check a new columm like "acccountPassword" before it allow the person to login.
So basically I need:
- To block the account creation using the previous parameter on the "bless.exe" bin.
- To block the access to accounts if the password doesnt match the one provided in the database of MSSQLSERVER.
- A launcher in # that will allow the user to create the account + password at the "localacccount" and "webaccount" tables of the database.
- The launcher will also verify if the user exists, if so it wont allow to create again.
- The launcher will give access to the bless.exe only if the password match the one store in the db.
- Forbid to login without password
I can send the databases .bak to check, aswell as the BLAuthServer.exe and BLAuthserver.dll where these informations are stored. I guess there is some way to block the login without password just decompiling the .dll with dnSpy and add some code for it to check a new columm like "acccountPassword" before it allow the person to login.
So basically I need:
- To block the account creation using the previous parameter on the "bless.exe" bin.
- To block the access to accounts if the password doesnt match the one provided in the database of MSSQLSERVER.
- A launcher in # that will allow the user to create the account + password at the "localacccount" and "webaccount" tables of the database.
- The launcher will also verify if the user exists, if so it wont allow to create again.
- The launcher will give access to the bless.exe only if the password match the one store in the db.
- Forbid to login without password