search

ValveSoftware / halflife

Half-Life 1 engine based games
Other
3.6k stars 598 forks source link

[CS 1.6] Prevent changing game files by server #269

Closed ghost closed 11 years ago

ghost commented 11 years ago

Some server plugins can change config.cfg or autoexec.cfg files, or even create new files in cstrike folder. For example, they can add connect *ip* line to the autoexec.cfg, or rebind some commands, like bind DEL "say "I'm a cheater" or download some resource files, so the game menu would look like this: and you have to reinstall the game to rid out of it it is possible to fix?

AndreiRomania commented 11 years ago

Might as well make CS imune to exterminate and destroy ?

xPaw commented 11 years ago

This was already fixed.

xPaw commented 11 years ago

Blocking binds/unbinds: #267 That is the most harmful thing that I could find in these 2 commands.

ghost commented 11 years ago

It is far away from "fixed". Try "fuck-off" plugin https://docs.google.com/file/d/0B-oc73ZQFT19ZDZDUER1X09sd2s/edit?usp=sharing&pli=1 use a amx_spank (nick) command, then amx_censure (nick) This plugin ruins your CS.

Other plugins can add connect "IP" in your autoexec.cfg

vjatseslav commented 11 years ago

motd_write is fixed, isn't it?

ghost commented 11 years ago

http://forums.alliedmods.net/showthread.php?p=3313 This plugins allows to exec any command on the client. Admin is able to change your fps_max, rates, net settings, nickname, set new binds and on and on

vjatseslav commented 11 years ago

Re-exec your config.cfg, what's the problem? It's not "changing files".

As @xPaw already said, topic about binds and commands is here: https://github.com/ValveSoftware/halflife/issues/267.

ghost commented 11 years ago

Why you're arguing if you even did not check the plugin? You will not be able to "re-exec config.cfg" and you will found a thousand screenshots in your cstrike folder. Yes. You can delete config.cfg and erase those files. But it is still very unpleasent. For another example. A lot of "anti-cheat" plugins (like Csfile.info Anti-cheat V1.23) can add NEW binds to config.cfg, and they won't erase after relauching the game.

bind "INS" "csf_cheatkey367 INS"
bind "DEL" "csf_cheatkey367 DEL"

Okay, it goes to https://github.com/ValveSoftware/halflife/issues/267 but admin shouldn't be able to change client's cvars and make ~3 per sec screenshots

alfred-valve commented 11 years ago

So you can no longer change user files. #267 is tracking not allowing bind changes, so I believe this report is a duplicate of that.