Fixed an exploit where the buyer can end the auction himself.

git-svn-id: https://svn.code.sf.net/p/rathena/svn/trunk@14255 54d463be-8e91-2dee-dedb-b68131a5f0ec

Changelog-Trunk.txt

@@ -3,6 +3,8 @@ Date	Added
 AS OF SVN REV. 5091, WE ARE NOW USING TRUNK.  ALL UNTESTED BUGFIXES/FEATURES GO INTO TRUNK.
 IF YOU HAVE A WORKING AND TESTED BUGFIX PUT IT INTO STABLE AS WELL AS TRUNK.
 
+2010/03/02
+	* Fixed an exploit where the buyer can end the auction himself. [Inkfish]
 2010/02/27
 	* Fixed Posion Status killing monsters with low max hp(like plants). [Inkfish]
 2010/02/19

src/char_sql/int_auction.c

@@ -378,6 +378,12 @@ static void mapif_parse_Auction_close(int fd)
 		return;
 	}
 
+	if( auction->seller_id != char_id )
+	{
+		mapif_Auction_close(fd, char_id, 1); // You cannot end the auction
+		return;
+	}
+
 	if( auction->buyer_id == 0 )
 	{
 		mapif_Auction_close(fd, char_id, 1); // You cannot end the auction