[JZServices]

I have created a bugfix for hackers that attempt to bypass bans by hijacking another users session that is in game through a known exploit. I have created this because Valve does not respond to reports of exploits in any timely manner. This only prevents this one type of bug where the hacker will force a current player to disconnect with joining with the valid player's steam id, then the valid player gets a disconnection with reason Steam ID already in use, and then the hacker will either keep the same steam id of that player or change it back to the valid banned steam id. I am unsure yet if it will prevent the valid user from disconnecting.

It also creates a print to server when a user is not using the attack and a print to server when they are.

[Graffiti]

cs 1.6 bug?

[JZServices]

It was written for css but the authentication for tf2 is similar i
. Basically it will detect if someone has the same steamid and if so disconnect the duplicate connecting. Also should work for csgo that is if this exploit exists for these I am not into the exploit searches so I just made sure it Stopped the attacker before posting this

[Mirandor]

you could add an option to ban the ip of he hacker...

[bl4nk]

It looks like you're kicking the wrong person. Instead of kicking the connecting client, you kick the client who is already on the server.

[rswallen]

You should also check that all involved clients have valid auth strings [OnClientAuthorized() is not guarenteed to fire before OnClientPutInServer()]

[PAL-18]

Is this plugin still broken? (it kicks the wrong person)