View Single Post
backwards
AlliedModders Donor
Join Date: Feb 2014
Location: USA
Old 12-13-2018 , 02:00   Re: .Net FastDL Server
Reply With Quote #3

This is a really nice idea and very creative, good job! Just need to have some security checks to verify users can't maliciously request files by path traversal exploits such as "\..\" or "\b" to escape the root directory. Also has to have a white list of allowed file extensions so people can't download server.cfg for instance and grab the rcon password or steal custom plugins with .smx/.dlls !! Not sure if these checks are already in place or not in the initial release but it's easy to over look these things.
__________________
I highly recommend joining the SourceMod Discord Server for real time support.
backwards is offline