Can an EA hack your MT account?

Hi guys, can any of the more technically minded among us tell me if an EA can access my broker account details through MT5 and therefore hack my account e.g. take my money?

I can't find a thread on this but apologies if it's been covered.

Cheers
Elliot

Apologies all, I've found the answer ... For anyone interested, don't enable DLL access, apparently this means EAs can access all files on your computer. However, they cannot withdraw funds from your Broker as Brokers will not transfer funds to third parties.


NOTE: I don't appear to have a delete thread option under the "Edit" menu ... Can someone please delete this or let me know how to do it and I'll remove the thread?

You have a "Cleanup" option at the top of your thread. Select "Other", input "Move to recycle bin" and explain on the right that the thread is obsolete.

I have the mt4 code for an old software of mine. I had a dll setup in my software to protect it... the server that the dll pointed to is gone and i just want to remove the part of the code that asks for any kind of protection...ie.. delete the protection altogether.

I have the code and have tried to delete the protection code but it keeps throwing errors... I am a noob in coding so i have no idea what to do. Can someone help?

14 lines down in the int oninit function is the url that the protection looks for but the url is not in existence anymore.

#property copyright "2017, DM"
#property link ""
#property version "1.06"
#property strict
datetime expiry=D'2023.05.27 00:00';
input int MagicNumber =123456;
input double Grid =100;//Pips till next trade
int Bit =1;
input double Lots =0.01;//Lot Size
int K_Period =5;
int D_Period =3;
int Slowing =3;
bool M_Money =1;
double MS,SS,TP,GR,FinalLots,prices,priceb,prices2,priceb2,lotes;
int cnt,ticket,total2,total5,totalb,totals,bit;
int mode = 1;
int trading_mode=3;
bool pong=0;
double TargetProfit=0;
double TargetLossB;
double TargetLossS;
double Saving=0;
double Saving_Lots;
double Lotes;
double pipswon;

datetime newtime;
double starter=AccountEquity();
bool enabletrading=0;
//+------------------------------------------------------------------+
//| Expert initialization function |
//+------------------------------------------------------------------+
int OnInit()
{
if(TimeCurrent()>expiry)
{
Alert("The EA has expired...");
return(INIT_FAILED);
}
if(IsTesting()==0)
{
//------------------------------------------------------------------
string cookie=NULL, headers;
string reqheaders="User-Agent: Mozilla/4.0\r\n";
char post[],result[];
int res;
string url="http://sil12345.com/answer2.php?account="+IntegerToString(AccountInfoInteger(ACCOUNT_LOGIN));
ResetLastError();
int timeout=5000;
res=WebRequest("GET",url,reqheaders,timeout,post,result,headers);
if(res==-0)
{
Print("Error in WebRequest. Error code =",GetLastError());
//--- Perhaps the URL is not listed, display a message about the necessity to add the address
Print("Add the address '"+url+"' in the list of allowed URLs on tab 'Expert Advisors'","Error",MB_ICONINFORMATION);
MessageBox("Add the address '"+url+"' in the list of allowed URLs on tab 'Expert Advisors'","Error",MB_ICONINFORMATION);
}
else
{
//--- Load successfully
PrintFormat("The file has been successfully loaded, File size =%d bytes.",ArraySize(result));
//--- Save the data to a file
int filehandle=FileOpen(IntegerToString(MagicNumber)+"qs.bin",FILE_WRITE|FILE_BIN);
//--- Checking errors
if(filehandle!=INVALID_HANDLE)
{
//--- Save the contents of the result[] array to a file
FileWriteArray(filehandle,result,0,ArraySize(result));
//--- Close the file
FileClose(filehandle);
}
else Print("Error in FileOpen. Error code=",GetLastError());
}
//------------------------------------------------------------------
int handle,i,pos[];
string str;
handle=FileOpen(IntegerToString(MagicNumber)+"qs.bin",FILE_READ|FILE_TXT|FILE_ANSI);
if(handle!=INVALID_HANDLE)
{
while(!FileIsEnding(handle))
str=FileReadString(handle);
}
else
PrintFormat("3-Error code = %d",GetLastError());//--- open the file

string mysignal="";
for(i=0;i<StringLen(str)-6;i++)
if(StringSubstr(str,i,6)=="<body>")
mysignal=StringSubstr(str,i+6,1);
if(mysignal=="1")
enabletrading=1;
/*Comment(
"\n| str: ",str,
"\n| strlen: ",StringLen(str),
"\n| mysignal: ",mysignal,
"\n| enabletrading: ",enabletrading
);*/
}
else if(IsTesting()==1)
enabletrading=1;
if(enabletrading==0)
{
Print("");
Comment("");
return(0);
}
else
Print("Running...");
EventSetTimer(60);
return(INIT_SUCCEEDED);
}
//+------------------------------------------------------------------+
//| |
//+------------------------------------------------------------------+
void OnTick(void)
{
if(enabletrading==1)
{
total5=0;
bit=Bit;
for(cnt=0;cnt<OrdersTotal();cnt++)
{
if(!OrderSelect(cnt,SELECT_BY_POS,MODE_TRADES))
continue;
if(OrderSymbol()==Symbol() && OrderMagicNumber()==MagicNumber)
{
bit=bit/2;
if(OrderType()==OP_BUY)
total5++;
if(OrderType()==OP_SELL)
total5++;
}
}
if(pong==0)
{
priceb=0;
prices=99999;
priceb2=99999;
prices2=0;
totalb=0;
totals=0;
if(total5==0)
pong=0;
mode=total5;

for(cnt=OrdersTotal()-1;cnt>=0;cnt--)
{
if(!OrderSelect(cnt,SELECT_BY_POS,MODE_TRADES))
continue;
if(OrderSymbol()==Symbol() && OrderMagicNumber()==MagicNumber)
{
if(OrderType()==OP_BUY)
{
totalb++;
if(OrderOpenPrice()>priceb)
priceb=OrderOpenPrice();
if(OrderOpenPrice()<priceb2)
priceb2=OrderOpenPrice();

}
else if(OrderType()==OP_SELL)
{
totals++;
if(OrderOpenPrice()<prices)
prices=OrderOpenPrice();
if(OrderOpenPrice()>prices2)
prices2=OrderOpenPrice();
}
}
}
if(totalb!=0)
{
TP=priceb2+(Grid+bit)*Point();
ObjectDelete("TP");
ObjectCreate( "TP",OBJ_HLINE, 0,Time[0],TP);
ObjectSet("TP", OBJPROP_COLOR,clrBlue);
GR=priceb2-Ask+Bid-Grid*Point();
trading_mode=1;
}
if(totals!=0)
{
TP=prices2-(Grid+bit)*Point();
ObjectDelete("TP");
ObjectCreate( "TP",OBJ_HLINE, 0,Time[0],TP);
ObjectSet("TP", OBJPROP_COLOR,clrBlue);
GR=prices2+Ask-Bid+Grid*Point();
trading_mode=0;
}
//-----------------------------------------------------------------------

for(cnt=OrdersTotal()-1;cnt>=0;cnt--)
{
if(!OrderSelect(cnt,SELECT_BY_POS,MODE_TRADES))
continue;
if(OrderSymbol()==Symbol() && OrderMagicNumber()==MagicNumber)
{
if(OrderType()==OP_BUY)
{
if(Bid >=TP && trading_mode==1 && pong==0 && OrderOpenPrice()==priceb2)
{
if(OrderClose(OrderTicket(),OrderLots(),Bid,3,Violet))
{
pong=1;
pipswon=((OrderClosePrice()-OrderOpenPrice())*OrderLots()*100);
}

else
Print("OrderClose error 1",ErrorDescription(GetLastError()));
}
}
else if(OrderType()==OP_SELL)
{
if(Ask <=TP && trading_mode==0 && pong==0 && OrderOpenPrice()==prices2)
{
if(OrderClose(OrderTicket(),OrderLots(),Ask,3,Violet))
{
pong=1;
pipswon=((OrderOpenPrice()-OrderClosePrice())*OrderLots()*100);
}
else
Print("OrderClose error 1",ErrorDescription(GetLastError()));
}
}
}
}
}


if(pong==1)
{
priceb=0;
prices=99999;
priceb2=99999;
prices2=0;
if(total5==0)
pong=0;
mode=total5;

for(cnt=OrdersTotal()-1;cnt>=0;cnt--)
{
if(!OrderSelect(cnt,SELECT_BY_POS,MODE_TRADES))
continue;
if(OrderSymbol()==Symbol() && OrderMagicNumber()==MagicNumber)
{
if(OrderType()==OP_BUY)
{
if(OrderOpenPrice()>priceb)
priceb=OrderOpenPrice();
if(OrderOpenPrice()<priceb2)
priceb2=OrderOpenPrice();

}
else if(OrderType()==OP_SELL)
{
if(OrderOpenPrice()<prices)
prices=OrderOpenPrice();
if(OrderOpenPrice()>prices2)
prices2=OrderOpenPrice();
}
}
}

//-----------------------------------------------------------------------

total2=0;
for(cnt=OrdersTotal()-1;cnt>=0;cnt--)
{
if(!OrderSelect(cnt,SELECT_BY_POS,MODE_TRADES))
continue;
if(OrderSymbol()==Symbol() && OrderMagicNumber()==MagicNumber)
{
if(OrderType()==OP_BUY)
{
total2++;
if(priceb==OrderOpenPrice() && pong==1)
{
if(OrderLots()>=0.01)
{
if(OrderClose(OrderTicket(),Lots,Bid,3,Violet))
{
pong=0;
TP=priceb2+(Grid+bit)*Point();
GR=priceb2-Ask+Bid-Grid*Point();

}
else
Print("OrderClose error ",ErrorDescription(GetLastError()));
return;
}
if(OrderLots()<0.01)
{
if(OrderClose(OrderTicket(),0.01,Bid,3,Violet))
{
pong=0;
TP=priceb2+(Grid+bit)*Point();
GR=priceb2-Ask+Bid-Grid*Point();

}
else
Print("OrderClose error ",ErrorDescription(GetLastError()));
return;
}
}
}
else if(OrderType()==OP_SELL)
{
total2++;
if(prices==OrderOpenPrice() && pong==1)
{
if(OrderLots()>=0.01)
{
if(OrderClose(OrderTicket(),Lots,Ask,3,Violet))
{
pong=0;
TP=prices2-(Grid+bit)*Point();
GR=prices2+Ask-Bid+Grid*Point();
}
else
Print("OrderClose error ",ErrorDescription(GetLastError()));
return;
}
if(OrderLots()<0.01)
{
if(OrderClose(OrderTicket(),0.01,Ask,3,Violet))
{
pong=0;
TP=prices2-(Grid+bit)*Point();
GR=prices2+Ask-Bid+Grid*Point();
}
else
Print("OrderClose error ",ErrorDescription(GetLastError()));
return;
}
}
}
}
}
}





if(newtime!=Time[1])
{
newtime=Time[1];


MS=iStochastic(NULL,0,K_Period,D_Period,Slowing,MODE_SMA,0,MODE_MAIN,1);
SS=iStochastic(NULL,0,K_Period,D_Period,Slowing,MODE_SMA,0,MODE_SIGNAL,1);


//-----------------------------------------------------------------------

mode=total5;
int B2=0;
if(priceb2!=99999)
B2=((priceb-Bid)/Point)/Grid;
if(prices2!=0)
B2=((Ask-prices)/Point)/Grid;

if(total2==0)
lotes=Lots*AccountEquity()/starter;

if(M_Money==1)
{
if(mode>0)
FinalLots=lotes*(B2+1);
else
FinalLots=lotes;
}
else
{
if(mode>0)
FinalLots=Lots*(B2+1);
else
FinalLots=Lots;
}

//---------------------------------------------
if(FinalLots<0.01)
FinalLots=0.01;
if(OrdersTotal()>=AccountInfoInteger(ACCOUNT_LIMIT_ORDERS) && AccountInfoInteger(ACCOUNT_LIMIT_ORDERS)!=0)
{
Print("Max allowed trades are opened");
return;
}
else
{
if(AccountFreeMargin()<SymbolInfoDouble(Symbol(),SYMBOL_TRADE_CONTRACT_SIZE)*FinalLots/AccountLeverage())
{
Print("We have no money. Free Margin = ",AccountFreeMargin());
return;
}
else if((FinalLots>SymbolInfoDouble(Symbol(),SYMBOL_VOLUME_MAX)) || (FinalLots<SymbolInfoDouble(Symbol(),SYMBOL_VOLUME_MIN)))
{
Print("Invalid lot size");
return;
}
if((SS>MS && mode==0) || (Bid<GR && mode>0 && trading_mode==1))
{
ticket=OrderSend(Symbol(),OP_BUY,NormalizeDouble(FinalLots,2),Ask,3,0,0,"Grid",MagicNumber,0,Green);
if(ticket>0)
{
if(OrderSelect(ticket,SELECT_BY_TICKET,MODE_TRADES))
{
Print("BUY order opened : ",OrderOpenPrice());
TP=Ask+(Grid+bit)*Point();
ObjectDelete("TP");
ObjectCreate( "TP",OBJ_HLINE, 0,Time[0],TP);
ObjectSet("TP", OBJPROP_COLOR,clrBlue);
GR=Bid-Grid*Point();
trading_mode=1;
}
}
else
Print("Error opening BUY order : ",ErrorDescription(GetLastError()));
return;
}
if((SS<MS && mode==0) || (Ask>GR && mode>0 && trading_mode==0))
{

ticket=OrderSend(Symbol(),OP_SELL,NormalizeDouble(FinalLots,2),Bid,3,0,0,"Grid",MagicNumber,0,Red);
if(ticket>0)
{
if(OrderSelect(ticket,SELECT_BY_TICKET,MODE_TRADES))
{
Print("SELL order opened : ",OrderOpenPrice());
TP=Bid-(Grid+bit)*Point();
ObjectDelete("TP");
ObjectCreate( "TP",OBJ_HLINE, 0,Time[0],TP);
ObjectSet("TP", OBJPROP_COLOR,clrBlue);
GR=Ask+Grid*Point();
trading_mode=0;
}
}
else
Print("Error opening SELL order : ",ErrorDescription(GetLastError()));
}
return;
}
}
}
}
//+------------------------------------------------------------------+
//| Return error description |
//+------------------------------------------------------------------+
string ErrorDescription(int error_code)
{
string error_string;
//----
switch(error_code)
{
//---- codes returned from trade server
case 0:
case 1: error_string="no error"; break;
case 2: error_string="common error"; break;
case 3: error_string="invalid trade parameters"; break;
case 4: error_string="trade server is busy"; break;
case 5: error_string="old version of the client terminal"; break;
case 6: error_string="no connection with trade server"; break;
case 7: error_string="not enough rights"; break;
case 8: error_string="too frequent requests"; break;
case 9: error_string="malfunctional trade operation (never returned error)"; break;
case 64: error_string="account disabled"; break;
case 65: error_string="invalid account"; break;
case 128: error_string="trade timeout"; break;
case 129: error_string="invalid price"; break;
case 130: error_string="invalid stops"; break;
case 131: error_string="invalid trade volume"; break;
case 132: error_string="market is closed"; break;
case 133: error_string="trade is disabled"; break;
case 134: error_string="not enough money"; break;
case 135: error_string="price changed"; break;
case 136: error_string="off quotes"; break;
case 137: error_string="broker is busy (never returned error)"; break;
case 138: error_string="requote"; break;
case 139: error_string="order is locked"; break;
case 140: error_string="long positions only allowed"; break;
case 141: error_string="too many requests"; break;
case 145: error_string="modification denied because order too close to market"; break;
case 146: error_string="trade context is busy"; break;
case 147: error_string="expirations are denied by broker"; break;
case 148: error_string="amount of open and pending orders has reached the limit"; break;
case 149: error_string="hedging is prohibited"; break;
case 150: error_string="prohibited by FIFO rules"; break;
//---- mql4 errors
case 4000: error_string="no error (never generated code)"; break;
case 4001: error_string="wrong function pointer"; break;
case 4002: error_string="array index is out of range"; break;
case 4003: error_string="no memory for function call stack"; break;
case 4004: error_string="recursive stack overflow"; break;
case 4005: error_string="not enough stack for parameter"; break;
case 4006: error_string="no memory for parameter string"; break;
case 4007: error_string="no memory for temp string"; break;
case 4008: error_string="not initialized string"; break;
case 4009: error_string="not initialized string in array"; break;
case 4010: error_string="no memory for array\' string"; break;
case 4011: error_string="too long string"; break;
case 4012: error_string="remainder from zero divide"; break;
case 4013: error_string="zero divide"; break;
case 4014: error_string="unknown command"; break;
case 4015: error_string="wrong jump (never generated error)"; break;
case 4016: error_string="not initialized array"; break;
case 4017: error_string="dll calls are not allowed"; break;
case 4018: error_string="cannot load library"; break;
case 4019: error_string="cannot call function"; break;
case 4020: error_string="expert function calls are not allowed"; break;
case 4021: error_string="not enough memory for temp string returned from function"; break;
case 4022: error_string="system is busy (never generated error)"; break;
case 4050: error_string="invalid function parameters count"; break;
case 4051: error_string="invalid function parameter value"; break;
case 4052: error_string="string function internal error"; break;
case 4053: error_string="some array error"; break;
case 4054: error_string="incorrect series array using"; break;
case 4055: error_string="custom indicator error"; break;
case 4056: error_string="arrays are incompatible"; break;
case 4057: error_string="global variables processing error"; break;
case 4058: error_string="global variable not found"; break;
case 4059: error_string="function is not allowed in testing mode"; break;
case 4060: error_string="function is not confirmed"; break;
case 4061: error_string="send mail error"; break;
case 4062: error_string="string parameter expected"; break;
case 4063: error_string="integer parameter expected"; break;
case 4064: error_string="double parameter expected"; break;
case 4065: error_string="array as parameter expected"; break;
case 4066: error_string="requested history data in update state"; break;
case 4099: error_string="end of file"; break;
case 4100: error_string="some file error"; break;
case 4101: error_string="wrong file name"; break;
case 4102: error_string="too many opened files"; break;
case 4103: error_string="cannot open file"; break;
case 4104: error_string="incompatible access to a file"; break;
case 4105: error_string="no order selected"; break;
case 4106: error_string="unknown symbol"; break;
case 4107: error_string="invalid price parameter for trade function"; break;
case 4108: error_string="invalid ticket"; break;
case 4109: error_string="trade is not allowed in the expert properties"; break;
case 4110: error_string="longs are not allowed in the expert properties"; break;
case 4111: error_string="shorts are not allowed in the expert properties"; break;
case 4200: error_string="object is already exist"; break;
case 4201: error_string="unknown object property"; break;
case 4202: error_string="object is not exist"; break;
case 4203: error_string="unknown object type"; break;
case 4204: error_string="no object name"; break;
case 4205: error_string="object coordinates error"; break;
case 4206: error_string="no specified subwindow"; break;
default: error_string="unknown error";
}
//----
return(error_string);
}

1. Deleted lines that compared the current time to the expiry date
2. Deleted WebRequest references and URL checks
3. Removed file reading and writing used for remote validation
4. Set trading to be active without depending on remote signals