[blissend]

Originally Posted by LordFear When editing a mute, it tries to open the file comms_editrecord.php but it gives 404 because the file is named editrecords.php only.

Same goes for comms_process_data.php and comms_records.php on some links. I've edited the three files responsible for these links (records.php, process_data.php, & editrecord.php) and uploaded for the lazy. This is based on v1.6.000 web frontend.

[Chanz]

I changed stuff in your plugin to make it more useful for me:

File sm_commstools.sp version "1.6.1-mod":
+Added native support for other plugins -> [ bool:Sm_Commstools_IsClientGaged(client), bool:Sm_Commstools_IsClientMuted(client) and bool:Sm_Commstools_IsClientSilenced(client) ].
+Added AutoExecConfig (means within cfg/sourcemod is the "sm_commstools.cfg" file).
*Fixed webinterface bugs (wrong filenames).
*Fixed sm_commstools_version is within sm_commstools.cfg.
~Changed: the plugin moves now basecomm.smx into disabled folder instead of just end and print a SetFailState (I copied the the code from sourcebans - thanks).

No changes made in sm_rename.sp

You can download it here:

[daleGEND]

Originally Posted by Chanz I changed stuff in your plugin to make it more useful for me: File sm_commstools.sp version "1.6.1-mod": +Added native support for other plugins -> [ bool:Sm_Commstools_IsClientGaged(client), bool:Sm_Commstools_IsClientMuted(client) and bool:Sm_Commstools_IsClientSilenced(client) ]. +Added AutoExecConfig (means within cfg/sourcemod is the "sm_commstools.cfg" file). *Fixed webinterface bugs (wrong filenames). *Fixed sm_commstools_version is within sm_commstools.cfg. ~Changed: the plugin moves now basecomm.smx into disabled folder instead of just end and print a SetFailState (I copied the the code from sourcebans - thanks). No changes made in sm_rename.sp You can download it here:

NVM, works. How do I add more reasons?

[Wyrda Ebrithil]

The permanent rename Totally is not working for me....

anyone else having same prob?

I also cannot change/delete entries via the web

The requested URL /permmutes/comms_process_data.php was not found on this server.

and there are three other missing files....

[Repo Man]

What about the commands
sm_unmute
sm_ungag
and sm_unsilence?

[Chanz]

Originally Posted by daleGEND NVM, works. How do I add more reasons?

Go to the page where the reasons are and look at your addressbar. Open your ftp and go where the file is located (something like /xyz/abc.php). Open the .php with a editor and search where the reasons are and extend them.

Originally Posted by Wyrda Ebrithil The permanent rename Totally is not working for me.... anyone else having same prob? I also cannot change/delete entries via the web The requested URL /permmutes/comms_process_data.php was not found on this server. and there are three other missing files....

It can be that the permanent rename does not work for some games, ask the dev of this plugin, since it works for me.
As for the change/delete does not work try to set your admin level to 9 and try again.
As for the requested url was not found: use the version I posted above.

Originally Posted by Repo Man What about the commands sm_unmute sm_ungag and sm_unsilence?

I don't know anymore if they exists or not, but if they exists then it means that they undo the specific actions. If they do not exist, well sm_gag can gag someone and ungag someone (it toggles).

[alinayg]

Originally Posted by Repo Man What about the commands sm_unmute sm_ungag and sm_unsilence?

Yeah they are not working.

[alinayg]

Originally Posted by Chanz It can be that the permanent rename does not work for some games, ask the dev of this plugin, since it works for me.

How do you go about perma renaming people in game?

[drhydralisk]

Zerg Patch - Security and Bug Fixes

Versions Effected: CommsTools Control Panel 1.6.000 and Below (All as of 2010/06/16)

I have created this to patch numerous vulnerability in CommsTools Control Panel. I created a PoC in Python that would exploit a list of websites with CommsTools Control Panel installed, and it was successful in gathering usernames, passwords (hashed but cracked most of them out of curiosity to see how weak of passwords people used, it is quite shocking), emails, etc. on all of them (even if safe mode or magic quotes was enabled). Apology to mannisfunhouse.eu, nadesgaming.com, clanao.org (clanao.com), convictgaming.com, willygeerts.be, and lostbrotherhood.com for being unknowing test subjects in-case it shows up in the server logs (didn't feel like installing multiple instances of PHP to test).

I will not release the PoC because of script kiddies.

Zerg Patch - CommsTools Control Panel

2010-06-16 Dr. Hydralisk <[email protected]>

Please report any bugs or errors found after installing Zerg Patch to the above email.
Tested on PHP 5.2 and PHP 5.3

	[records.php]
		* Changed: Timezone using server defined timezone instead of Chicago.
		* Fixed: Error displaying in search field.
		* Fixed: Page listing accepting any value, possibly being exploitable.
		* Fixed: Search filters not being protected allowing multiple SQL injections.
		* Fixed: Form submitting to wrong file.
		
	[rename_records.php]
		* Changed: Timezone using server defined timezone instead of Chicago.
		* Fixed: Page listing accepting any value, possibly being exploitable.
		
	[admin.php]
		* Changed: Timezone using server defined timezone instead of Chicago.
		
	[editrecord.php]
		* Fixed: Form submitting to wrong file.
		
	[process_data.php]
		* Fixed: Form submitting to wrong file.

Instructions on how to install are included.

Download Mirrors:

• http://www.mediafire.com/?o0ggmjdmmmj
  http://www.2shared.com/file/skxPeWmb/Zerg_Patch.html
  http://rapidshare.com/files/39986332...Patch.zip.html
  http://www.filedropper.com/zergpatch

[Chanz]

Not the fine way to tell we have a interface installed that has security holes, fatch all passwords, email accs and then post in a public forum without letting us know before...

Don't get me wrong, its good that you found out those holes, but next time inform your test subjects, before you try out security holes and do further actions like posting in a public forum!