3 Commits

Author	SHA1	Message	Date
Houmgaor	2738b19c32	refactor(channelserver): extract Goocoo, Diva, Misc, Scenario, and Mercenary repositories ... Move remaining raw s.server.db.* queries from handler files into dedicated repository structs, completing the repository extraction effort. Also adds SaveCharacterData and SaveHouseData to CharacterRepository. Fixes guild_hunts query to select both cats_used and start columns to match the existing two-column Scan call. Adds slot index validation in GoocooRepository to prevent SQL injection via fmt.Sprintf.	2026-02-21 13:27:08 +01:00
Houmgaor	604d53d6d7	fix(channelserver): validate packet fields before use in handlers ... Several handlers used packet fields as array indices or SQL column names without bounds checking, allowing crafted packets to panic the server or produce malformed SQL. Panic fixes (high severity): - handlers_mail: bounds check AccIndex against mailList length - handlers_misc: validate ArmourID >= 10000 and MogType <= 4 - handlers_mercenary: check RawDataPayload length before slicing - handlers_house: check RawDataPayload length in SaveDecoMyset - handlers_register: guard empty RawDataPayload in OperateRegister SQL column name fixes (medium severity): - handlers_misc: early return on unknown PointType - handlers_items: reject unknown StampType in weekly stamp handlers - handlers_achievement: cap AchievementID at 32 - handlers_goocoo: skip goocoo.Index > 4 - handlers_house: cap BoxIndex for warehouse operations - handlers_tower: fix MissionIndex=0 bypassing normalization guard	2026-02-19 00:23:04 +01:00
Houmgaor	9e8dc034be	refactor(channelserver): split handlers.go into goocoo, scenario, and misc files ... Replace the grab-bag handlers.go with thematically organized files: - handlers_goocoo.go: Goocoo/Guacot pet handlers - handlers_scenario.go: Scenario counter struct and handler - handlers_misc.go: remaining unrelated handlers (etc points, earth, equip skin history, trend weapons, minidata, lobby crowd, etc.)	2026-02-18 19:42:59 +01:00