[shavit]

Originally Posted by Mitchell I think ill post what we are all thinking here... How do you know this works?

Connect exploit:
sm_cvar sv_cheats 1
net_showevents 1
Tell someone to connect

Disconnect exploit:
Set your server + client to run with the -insecure parameter.
Compile the following source code with Source SDK 2013's utils/serverplugin_sample/serverplugin_empty.cpp file, don't remove the includes since I don't know what's needed for that.
After you compile it place it in your games's addons/ folder and once on main menu use plugin_load to load this plugin:

PHP Code:

CON_COMMAND(disconnect_exploit, "Disconnect with a custom message")
{
    INetChannel *channel = (INetChannel*)enginecl->GetNetChannelInfo();
    channel->Shutdown("testing disconnect reason exploit");

    return;
} 


Then looks at your server's console or ask someone to join and see the effect.
After that, run that plugin and test again.

Originally Posted by vodka00 I think you know the answer. Thanks shavit, what about something that fixes unwanted downloads by others?

https://forums.alliedmods.net/showthread.php?t=142249

Originally Posted by Root_ I guess SMAC and RCON locker already preventing this exploit.

SMAC doesn't.

RCON locker just makes the disconnect reason empty which is a big no no no.

PHP Code:

public Action:player_disc(Handle:event, const String:name[], bool:dontBroadcast)
{
    SetEventString(event,"reason","");
    return Plugin_Continue;
}