🆙 Bump version to 4.2.43 [skip ci]

㊙️ Security updates

Emulator/pom.xml

@@ -6,7 +6,7 @@
 
     <groupId>com.eu.habbo</groupId>
     <artifactId>Habbo</artifactId>
-    <version>4.2.40</version>
+    <version>4.2.43</version>
 
     <properties>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>

Emulator/src/main/java/com/eu/habbo/habbohotel/catalog/CatalogManager.java

@@ -1247,6 +1247,11 @@ public class CatalogManager {
                                     Guild guild = Emulator.getGameEnvironment().getGuildManager().getGuild(guildId);
 
                                     if (guild != null && Emulator.getGameEnvironment().getGuildManager().getGuildMember(guild, habbo) != null) {
+                                        if (baseItem.getName().equals("guild_forum") && guild.getOwnerId() != habbo.getHabboInfo().getId()) {
+                                            habbo.getClient().sendResponse(new AlertPurchaseFailedComposer(AlertPurchaseFailedComposer.SERVER_ERROR));
+                                            return;
+                                        }
+
                                         InteractionGuildFurni habboItem = (InteractionGuildFurni) Emulator.getGameEnvironment().getItemManager().createItem(habbo.getClient().getHabbo().getHabboInfo().getId(), baseItem, limitedStack, limitedNumber, extradata);
                                         habboItem.setExtradata("");
                                         habboItem.needsUpdate(true);

Emulator/src/main/java/com/eu/habbo/habbohotel/items/interactions/InteractionMultiHeight.java

@@ -65,9 +65,8 @@ public class InteractionMultiHeight extends HabboItem {
                 if (this.getBaseItem().getMultiHeights().length > 0) {
                     this.setExtradata("" + (Integer.parseInt(this.getExtradata()) + 1) % (this.getBaseItem().getMultiHeights().length));
                     this.needsUpdate(true);
-                    room.updateTiles(room.getLayout().getTilesAt(room.getLayout().getTile(this.getX(), this.getY()), this.getBaseItem().getWidth(), this.getBaseItem().getLength(), this.getRotation()));
-                    room.updateItemState(this);
-                    //room.sendComposer(new UpdateStackHeightComposer(this.getX(), this.getY(), this.getBaseItem().getMultiHeights()[Integer.valueOf(this.getExtradata())] * 256.0D).compose());
+                    room.updateItem(this);
+                    this.updateUnitsOnItem(room);
                 }
             }
         }

Emulator/src/main/java/com/eu/habbo/messages/incoming/catalog/CatalogBuyItemEvent.java

@@ -14,11 +14,7 @@ import com.eu.habbo.habbohotel.users.HabboBadge;
 import com.eu.habbo.habbohotel.users.HabboInventory;
 import com.eu.habbo.habbohotel.users.subscriptions.Subscription;
 import com.eu.habbo.messages.incoming.MessageHandler;
-import com.eu.habbo.messages.outgoing.catalog.AlertPurchaseFailedComposer;
-import com.eu.habbo.messages.outgoing.catalog.AlertPurchaseUnavailableComposer;
-import com.eu.habbo.messages.outgoing.catalog.BuildersClubFurniCountComposer;
-import com.eu.habbo.messages.outgoing.catalog.BuildersClubSubscriptionStatusComposer;
-import com.eu.habbo.messages.outgoing.catalog.PurchaseOKComposer;
+import com.eu.habbo.messages.outgoing.catalog.*;
 import com.eu.habbo.messages.outgoing.generic.alerts.BubbleAlertComposer;
 import com.eu.habbo.messages.outgoing.generic.alerts.BubbleAlertKeys;
 import com.eu.habbo.messages.outgoing.generic.alerts.HotelWillCloseInMinutesComposer;
@@ -52,15 +48,8 @@ public class CatalogBuyItemEvent extends MessageHandler {
             int itemId = this.packet.readInt();
             String extraData = this.packet.readString();
             int count = this.packet.readInt();
-
-            // Clamp the client-supplied quantity. Without this the club-offer
-            // branch accumulates cost in plain ints and a huge count overflows
-            // to a negative total, bypassing the affordability checks and
-            // CREDITING the buyer (free currency/subscription exploit).
-            if (count < 1 || count > 100) {
-                this.client.sendResponse(new AlertPurchaseFailedComposer(AlertPurchaseFailedComposer.SERVER_ERROR).compose());
-                return;
-            }
+            if (count < 1) count = 1;
+            if (count > 100) count = 100;
 
             try {
                 if (this.client.getHabbo().getInventory().getItemsComponent().itemCount() > HabboInventory.MAXIMUM_ITEMS) {
@@ -212,12 +201,6 @@ public class CatalogBuyItemEvent extends MessageHandler {
             else
                 item = page.getCatalogItem(itemId);
 
-            // Search-results buy sends the catalog offer_id as itemId
-            // (FurnitureOffer.offerId is derived from furnidata's
-            // purchaseOfferId, which matches `catalog_items.offer_id`),
-            // not the `catalog_items.id` primary key that getCatalogItem
-            // expects. Fall back to scanning the page for the matching
-            // offer_id so the search → buy flow works.
             if (item == null && !(page instanceof RecentPurchasesLayout)) {
                 for (CatalogItem candidate : page.getCatalogItems().valueCollection()) {
                     if (candidate != null && candidate.getOfferId() == itemId) {
@@ -226,13 +209,7 @@ public class CatalogBuyItemEvent extends MessageHandler {
                     }
                 }
             }
-            // Inventory cap check based on the actual base items the
-            // purchase will create, not the page layout - bots/pets
-            // can legitimately live on bundle pages, search results,
-            // recent-purchases, etc., and the layout-instanceof check
-            // missed all those paths. Mirrors the bot/pet branches
-            // inside CatalogManager.purchaseItem (Item.isBot / isPet
-            // and the same prefix check) so detection stays in sync.
+
             boolean itemHasBot = false;
             boolean itemHasPet = false;
 

Emulator/src/main/java/com/eu/habbo/messages/incoming/rooms/items/ToggleFloorItemEvent.java

@@ -25,6 +25,11 @@ public class ToggleFloorItemEvent extends MessageHandler {
 
     private static HashSet<String> PET_BOXES = new HashSet<>(Arrays.asList("val11_present", "gnome_box", "leprechaun_box", "velociraptor_egg", "pterosaur_egg", "petbox_epic"));
 
+    @Override
+    public int getRatelimit() {
+        return 100;
+    }
+
     @Override
     public void handle() throws Exception {
         try {

Emulator/src/main/java/com/eu/habbo/messages/incoming/rooms/items/ToggleWallItemEvent.java

@@ -9,6 +9,11 @@ import com.eu.habbo.plugin.Event;
 import com.eu.habbo.plugin.events.furniture.FurnitureToggleEvent;
 
 public class ToggleWallItemEvent extends MessageHandler {
+    @Override
+    public int getRatelimit() {
+        return 100;
+    }
+
     @Override
     public void handle() throws Exception {
         Room room = this.client.getHabbo().getHabboInfo().getCurrentRoom();

Emulator/src/main/java/com/eu/habbo/messages/incoming/rooms/items/TriggerColorWheelEvent.java

@@ -6,6 +6,11 @@ import com.eu.habbo.habbohotel.users.HabboItem;
 import com.eu.habbo.messages.incoming.MessageHandler;
 
 public class TriggerColorWheelEvent extends MessageHandler {
+    @Override
+    public int getRatelimit() {
+        return 100;
+    }
+
     @Override
     public void handle() throws Exception {
         int itemId = this.packet.readInt();

Emulator/src/main/java/com/eu/habbo/messages/incoming/rooms/items/TriggerDiceEvent.java

@@ -7,6 +7,11 @@ import com.eu.habbo.habbohotel.users.HabboItem;
 import com.eu.habbo.messages.incoming.MessageHandler;
 
 public class TriggerDiceEvent extends MessageHandler {
+    @Override
+    public int getRatelimit() {
+        return 100;
+    }
+
     @Override
     public void handle() throws Exception {
         int itemId = this.packet.readInt();

Emulator/src/main/java/com/eu/habbo/messages/incoming/rooms/items/TriggerOneWayGateEvent.java

@@ -5,6 +5,11 @@ import com.eu.habbo.habbohotel.users.HabboItem;
 import com.eu.habbo.messages.incoming.MessageHandler;
 
 public class TriggerOneWayGateEvent extends MessageHandler {
+    @Override
+    public int getRatelimit() {
+        return 100;
+    }
+
     @Override
     public void handle() throws Exception {
         if (this.client.getHabbo().getHabboInfo().getCurrentRoom() == null)