[TheTopMostDog]

Howdy guys,

Myself and other CSS server owners from my area have been recently dealing with hackers on a daily basis. We have come to notice that most of them are repeat offenders on new accounts with often less than 15 hours playtime. What we're looking for to counter these guys is a plugin which grabs their hours played and allows admins to set up automatic commands to be executed on these players.

For example, using commands provided from other plugins:

A) Players with under 15 hours
sm_spectate / every 10 seconds
sm_privatemessage <string> / every 30 seconds

B) Players with under 2 hours
sm_kick <kick message> / on detect, once only

C) Players with undetectable hours (private profiles?)
sm_disarm / on round start
sm_cash 0 / every 5 seconds

D) Ignore whitelist players

My rival server owners are very interested in my idea of a plugin of this nature. None of us have come across one in our years running servers. We are willing to discuss work on commission, but if someone were to spin something up for us, or even point us in the right direction, we'd be very grateful.

[friagram]

Could do, add me on steam.

[The1Speck]

Probably not the easiest/best solution, but its the first that comes to mind:

This method will be mostly web-based with most of the legwork done with PHP.

On user connect, an invisible motd panel will be opened for the user with their steamID as an argument to a PHP script running on a webserver (can also be done using cURL instead of MOTD I suppose)

The PHP script will then take the steamId and run a script that queries Steam's WebAPI (http://steamcommunity.com/dev).

Once their playtime is retrieved, if the user has <15hrs, the script sends an RCON command to the server "sm_under15 #SteamID" which creates a TIMER_REPEAT which will do the punishments you described in your post on the client. If the player has over 15hours, their steamID will be logged to a database of 'whitelisted' users, this is to avoid unnecessary calls to the API. Users can be manually added to the database either through PHPmyAdmin or by a command, !whitelist <user>.

[Dr. Greg House]

@The1Speck: No.
Only reliable solution would be to use Steamworks/Steamtools (not only to do the webrequest but rather read out the stats directly).
Also cURL-Extension is evil.

[The1Speck]

Originally Posted by Dr. Greg House @The1Speck: No. Only reliable solution would be to use Steamworks/Steamtools (not only to do the webrequest but rather read out the stats directly). Also cURL-Extension is evil.

Like I said, there's probably a better solution lol.

[friagram]

Steamworks/steamtools has problems with http requests too.

[Dr. Greg House]

Did I say to use http requests? Sorry if this was unclear.

[friagram]

Ah, you're suggesting that the stats would be retrieved from steamtools/steamworks when they are not available via http where socket/curl?

From what i've seen, steamtools/steamworks has problems just as often.

[Dr. Greg House]

I wouldn't even go that far to use the http request. Why? The server already has the data cached, just fetch it with the extension.
And while I have no idea what you're doing, the only issue I've had with fetching data is that for some games (L4D2) you don't have a working callback that tells you when the data is ready to be fetched. Worst case, I'd poll, but I would never bother trying to use the webapi. Also I hate the webapi.