fullupdate Blocker (fixes an expliot)

jtp10181 · **Plugin Info:**

I just found this out recently..... if you use the client command "fullupdate" it will force a HUD reset on your end. The problem with this for plugins is that MANY use this event to tell when a user has a new spawn at that start of a round like so...

Code:

register_event("ResetHUD","newSpawn","b")

This event is in fact called when using this "fullupdate" command. It can be used to reset tons of settings in most plugins because this is where they initialize variables for the round.

I made a simple plugin that blocks this command form resetting the HUD. I have not found any valid use for this command so blocking it should be safe.

Plugin now logs attempts to "fullupdate.log" in the logs dir.

Just load this plugin before any plugin you want it to affect.

Neo-Vortex · 07-31-2004 , 21:30

hmmm, i should test this out on acouple of fun-servers... (using fullupdate to skrew with it)... see if it really has much effect...

QwertyAccess · 08-01-2004 , 00:17

jtp, it would be best if you didnt show others how.... anyway my server is protected so i dont care, ive protected it a loooong time ago. theres also another way to make it like you resethud

jtp10181 · 08-01-2004 , 01:06

I figured its better to annouce the problem and fix it than pretend its not there and hope people dont use it.....

QwertyAccess · 08-01-2004 , 01:34

i'd just upload the .amx version if i were u,

jtp10181 · 08-01-2004 , 08:27

All plugins must be Open Source as part of the license I belive.....

devicenull · 08-01-2004 , 13:18

Quote:

Originally Posted by QwertyAccess

jtp, it would be best if you didnt show others how.... anyway my server is protected so i dont care, ive protected it a loooong time ago. theres also another way to make it like you resethud

Theres lots of problems with the full* commands... so this is nothing new

AllMassive · 04-17-2005 , 18:38

HEya - are there still issues with those fullupdate-cmds ?

Should i install that plugin to avoid "bad behavior" of my server ?!

jtp10181 · 04-19-2005 , 18:35

Quote:

Originally Posted by AllMassive

HEya - are there still issues with those fullupdate-cmds ?

Should i install that plugin to avoid "bad behavior" of my server ?!

it will always be a problem, as long as plugin authors continue to use bad style for coding and use a hudreset as a way to detect a new round.

PyRo · 04-19-2005 , 20:36

Thanks for this, I tried fullupdate on my server and found out it's abusable so this will be going on my server