Fixed an exploit where the buyer can end the auction himself.

git-svn-id: https://svn.code.sf.net/p/rathena/svn/trunk@14255 54d463be-8e91-2dee-dedb-b68131a5f0ec
2010-03-02 09:50:32 +00:00
parent 339022cd20
commit 5cda184eb8
2 changed files with 8 additions and 0 deletions
--- a/src/char_sql/int_auction.c
+++ b/src/char_sql/int_auction.c
@@ -378,6 +378,12 @@ static void mapif_parse_Auction_close(int fd)
 		return;
 	}

+	if( auction->seller_id != char_id )
+	{
+		mapif_Auction_close(fd, char_id, 1); // You cannot end the auction
+		return;
+	}
+
 	if( auction->buyer_id == 0 )
 	{
 		mapif_Auction_close(fd, char_id, 1); // You cannot end the auction