4 replies to this topic

[sLAUGHTER]

While playing the Wheel of Excitement...

I got the following MYSQL errors.

I replaced my username for safety.

UPDATE personal SET neopoints = neopoints - 500 WHERE username = 'my_username';

UPDATE neopets SET current_hp = FLOOR(current_hp / 3) WHERE owner = 'my_username' AND current_hp >= 4 LIMIT 4;

INSERT INTO play_limiter2 (username, unixtime, game_id, plays) VALUES ('my_username', A_UNIX_TIMESTAMP, 'wheel_excitement', 1) ON DUPLICATE KEY UPDATE plays = plays + 1;

I thought that was interesting.

Edited by sLAUGHTER, 02 November 2011 - 09:36 AM.

[Waser Lave]

Looks like they've got their tables set up quite cleanly.

[sLAUGHTER]

OHHHH! I get it.

[ovonel]

Looks pretty standard with distinct tables and a common key being the username. Imagine if we got the chance to perform SQL injection lol.

UPDATE personal SET neopoints = neopoints + 100000000 WHERE username = 'ovonel';

Where ovonel refers to an already frozen account. =)

[sLAUGHTER]

Perhaps just... Give everyone anywhere from 100M to 2B. Unbiased, pseudo random numbers. The generation of random numbers is too important to be left to chance.

UPDATE personal SET neopoints = neopoints + (FLOOR(100000000 + RAND() * 2000000000));

Edited by sLAUGHTER, 06 November 2011 - 11:49 PM.