Skins: |

NWN SCRIPTS

- Jump to comments -

Title

Fix pseudo casting exploit

Author

ILikeKillAndYou

Submitted / Updated

04-14-2010 / 04-14-2010

Category

Area

Expansions

HOTU-1.65

View Code

#include "x2_inc_switches"
void main()
{
object oPC; oPC = OBJECT_SELF;
//Cast by what
if((GetSpellCastItem() != OBJECT_INVALID) ||
    (GetIsDM(oPC)) ||
    (GetIsDMPossessed(oPC)) ||
    (!GetIsPC(oPC)))
    {
    return;
    }

//Variable.
int iSpellID; iSpellID = GetSpellId();
int iSpellClass; iSpellClass = GetLastSpellCastClass();
string sClass;
switch(iSpellClass)
    {
    case CLASS_TYPE_CLERIC: sClass = "Cleric";break;
    case CLASS_TYPE_DRUID: sClass = "Druid";break;
    case CLASS_TYPE_WIZARD: sClass = "Wiz_Sorc";break;
    }
string sCasterLvl; sCasterLvl = Get2DAString("spells", sClass, iSpellID);
int iInitiate; iInitiate = StringToInt(sCasterLvl);
//Invalid intiate level? Not a regular spell or not a valid class
if(iInitiate == 0)
    {
    return;
    }
int iLevelReq; iLevelReq = (GetLevelByClass(iSpellClass,oPC)+1)/2;
if(iLevelReq < iInitiate)
    {
    SetModuleOverrideSpellScriptFinished();
    FloatingTextStringOnCreature("* Pseudocasting detected. Aborting the spell. *", oPC, FALSE);
    }
}

Select All Text | View Code in separate window

Format

Module and Code

Type

Type - Other

Includes

BioWare Standard

Description

Pseudo casting is basically cast a spell your not supposed to be able to. By example if a 19 Druid 1 cleric with 19 wisdom have a item that give him a spellslot level 9 spell. He will be able to cast a level 9 spell of cleric. That simply affect wizard (spell learn from scroll), druid and cleric other class cannot pseudo cast (as far I know).

This script only active on player, so it doesn't fired on item dm/creature and such. If a exploit is detected the script simply stop the spell and give a feedback to the player, it will not warning the DM (pointless anyway).

This fix is easy to install :
1) Click Edit tab then go to the Module properties
2) In the Advanced tab you will have a Variables in the menu.
3) Add a string nammed X2_S_UD_SPELLSCRIPT for the value simply enter the script that you saved the script.

Files

Name	Type	Size	Downloads
ap_sp_fix.modap_sp_fix.mod Submitted: 04-14-2010 / Last Updated: 04-14-2010	mod	32.11Kb	22
This is a example how to install the fix, you do not need this all the code is above.

SCORE OUT OF 10

10
1 votes
View Stats
Cast Your Vote!

PORTFOLIO

Add this entry to your portfolio so you can track it

Manage your existing portfolios or create a new one.

SCREENS

No Images

You Must Be Logged In to Participate.

Comments (4):

Posted by ShaDoOoW at 2010-08-06 12:03:25 Voted 10.00 on 08/06/10

Didn't knew about it. Nice catch.
_________________________
[Boost System] [Door System] [Devastating Critical Immunity] [HIPS remake] [Circle Kick Mode] [1.69 Full 2da Source]

Posted by ILikeKillAndYou at 2010-04-14 20:02:05

I simply use the method of scripting, everyone have is own. I prefer to initiate the variable first since in javascript that reduce the lag even if that about 1/100 of a milli second. That I reflex to initiate then like that. Not a big deal anyway.

Forgot about the GM thing, I just add it.

I just corrected the typo (Yah my english suck I know that already)

Posted by The_Krit at 2010-04-14 19:37:57

Looking at the script itself:

Why do you use the more complicated

object oPC; oPC = OBJECT_SELF;

instead of

object oPC = OBJECT_SELF;

to initialize your variables?

Where is this supposed check for not applying to DMs? You check for not being a PC, but DMs and DM-possessed NPCs count as PCs as far as scripting goes.

Oh, and "aborting" has a 't' in it.

Posted by The_Krit at 2010-04-14 19:28:13

This should probably come with an assessment of the likelihood of someone being able to pseudo-cast. Wizards can only pseudo-cast if they de-level, which many modules do not provide an opportunity for. The cleric/druid example requires a certain type of item without which the PC is benefiting very little from the class split.

Overall, I'd advise people against going through the trouble of blocking this merely because pseudo-casting is a possibility. (Pseudo-casting is already a difficult and risky thing to try to take advantage of, and integrating this fix could be something of a pain if you already have a custom spellhook.) However, if it is an actual problem rather than a theoretical one, sure use a script like this.

You must be Logged In to post comments in this section.