Raised This Month: $ Target: $400
 0% 

[ALL] Command & CVAR shortcut


  
 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
ddhoward
Veteran Member
Join Date: May 2012
Location: California
Old 12-27-2013 , 04:11   Re: [ALL] Command shortcut
Reply With Quote #7

Change your name on steam to:

Code:
derp ; quit
Then run a command that this plugin provides. The server will shut down. Or change your name to:

Code:
derp ; sm_kick @all
and all of a sudden, the Console kicks the entire server.

Use the client ID or even the Steam ID instead of the name. NEVER EVER EVER pass the client's name through ServerCommand()! This will allow the client to run any command from the Console as if they had (albeit very cumbersome) RCON access. And indeed, every server running this plugin is now open to this very serious exploit.

You need to replace GetClientName() with GetClientUserId(). Then put that number after the # symbol. The following are examples of commands using the User ID as a target.

Code:
sm_rof #124 3
sm_kick #534 "no mic spam allowed here sir"
sm_ban #321 0 "name changing hacker"
sm_beacon #48
etc etc etc
__________________

Last edited by ddhoward; 12-27-2013 at 04:56.
ddhoward is offline
 



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 11:45.


Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode