[DJ Tsunami]

Yup, I read your PM and will get back to you asap. It works with the 1.4 database, just make a backup to be safe

[Snaggle]

Will this now work with commands such as sm_voteban?

[DJ Tsunami]

Yes, it most certainly will!

[ppalex]

Is that misprint in config?

"9" "Ignoring Admins" "0" "Team Stacking" "11" "Own Reason"

Maybe Team Stacking must have index 10?

[ppalex]

Restriction permanent ban by admin flags is no longer available?

[DJ Tsunami]

The indices don't matter, you could use "" for all of them and it would still work. I just used the numbers that are used in a menu for clarification.

You can now restrict ban times in the menu with the "flags" option under "BanTimes" in the config file. The commands (sm_ban, sm_banip, sm_addban) no longer restrict permanent banning, as people can just type sm_ban name 1000000 to get around that restriction.

[ppalex]

In sb_bans: When new player joins server with client index of any previous player - he already has PlayerStatus = true (before he will be verified) that allows to ban unverified (and possibly, already banned) player. Is it a bug?

[friagram]

Admins plugin is a little bit scary, as i'ts not that hard to rcon takeover many servers -- this would provide a attacker extra tools to use against a compromised server.

Similarly, the sm_unban could be used to unban large amounts of people if an attacker did make it into a server.

Are there any plans on adding immunity for the bans plugin, or a configuration option so that bans can not be added against other SB admins?

Are there any plans of preventing console from using these commands (with a configuration option) to protect servers against attackers - so that admin groups/admins can not be created via rcon, and only by existing admins?

a simple if !client on the command would do it, or pull some flag from the SB web panel to come, or convar (sb_allowconsole) or whatever.

[DJ Tsunami]

If you're worried about RCON takeovers, you can either disable RCON or disable the sm_addban/sm_unban commands in sourcebans.cfg (this has been possible for years). I'm not sure how this plugin is more vulnerable than any other plugin, since SourceMod already comes with these commands, but please elaborate if you feel otherwise. Console banning is however a necessary feature, take for example an anti-cheat plugin that automatically bans people.

Originally Posted by ppalex In sb_bans: When new player joins server with client index of any previous player - he already has PlayerStatus = true (before he will be verified) that allows to ban unverified (and possibly, already banned) player. Is it a bug?

Should be fixed in r147.

[friagram]

I was only referring to console unbanning of offline players