Raised This Month: $4 Target: $400
 1% 

Dynamic Join MOTD


Post New Thread Reply   
 
Thread Tools Display Modes
p3tsin
Senior Member
Join Date: Sep 2005
Location: Finland
Old 05-09-2010 , 15:50   Re: Dynamic Join MOTD
Reply With Quote #11

Quote:
Originally Posted by psychonic View Post
While that method probably works, it should not be publicized as it allows running any command on clients, effectively exploiting them, working around other checks in place limiting you from doing so.
I thought valve fixed that exploit ages ago

@LumiStance: no need for a packet sniffer. Just dump the contents of a VGUIMenu usermessage (the motd one) and you'll figure it out.
__________________
plop
p3tsin is offline
LumiStance
AlliedModders Donor
Join Date: Jan 2009
Location: Northern California
Old 05-09-2010 , 16:57   Re: Dynamic Join MOTD
Reply With Quote #12

Censorship at its finest. You should delete SourceMod while you are at it.
__________________
LumiStance is offline
psychonic

BAFFLED
Join Date: May 2008
Old 05-09-2010 , 17:03   Re: Dynamic Join MOTD
Reply With Quote #13

Quote:
Originally Posted by p3tsin View Post
I thought valve fixed that exploit ages ago
They only first it for redirecting players (the connect commands).

Quote:
Originally Posted by p3tsin View Post
@LumiStance: no need for a packet sniffer. Just dump the contents of a VGUIMenu usermessage (the motd one) and you'll figure it out.
He did already figure it out. That's what was removed.

Quote:
Originally Posted by LumiStance View Post
Censorship at its finest. You should delete SourceMod while you are at it.
The use you had was fully legitimate, but the method you used can be used to exploit clients, which we don't support here. Running most commands on clients is already purposely blocked in most games, and running the ones that each game allows is already supported.
psychonic is offline
LumiStance
AlliedModders Donor
Join Date: Jan 2009
Location: Northern California
Old 05-09-2010 , 18:05   Re: Dynamic Join MOTD
Reply With Quote #14

How would I know if a method is not allowed to be posted here?

I haven't gone out and researched how to exploit CSS. Were these on a rogue server, or are there some serious vulnerabilities that allow a player to make changes to another players computer, in areas outside of steam?

I'm also confused why a server redirecting a client would be considered an exploit. Web servers do this all of the time.
__________________
LumiStance is offline
devicenull
Veteran Member
Join Date: Mar 2004
Location: CT
Old 05-09-2010 , 19:09   Re: Dynamic Join MOTD
Reply With Quote #15

Valve removed the ability to directly redirect clients, so anything that works around this block is an exploit.

Value removed the ability to execute commands on clients, so anything that works around this block is an exploit.

The code to send custom motd's is very close to the exploit code, and won't be allowed.
__________________
Various bits of semi-useful code in a bunch of languages: http://code.devicenull.org/
devicenull is offline
Marley
Junior Member
Join Date: Oct 2008
Old 05-09-2010 , 19:33   Re: Dynamic Join MOTD
Reply With Quote #16

Surely the easiest way would be to have a php page as the url, and send the data needed via params in a url?
Marley is offline
LumiStance
AlliedModders Donor
Join Date: Jan 2009
Location: Northern California
Old 05-10-2010 , 03:40   Re: Dynamic Join MOTD
Reply With Quote #17

devicenull, I was not aware that valve has been removing functionality, nor was I aware that legitimate workarounds are not allowed.

Is there a list of things I should avoid (I didn't see these items in http://forums.alliedmods.net/misc.php?do=showrules), or do I just hope that I don't anger the gods with my actions?

Marley, that's the easy part.
__________________
LumiStance is offline
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 09:05.


Powered by vBulletin®
Copyright ©2000 - 2020, vBulletin Solutions, Inc.
Theme made by Freecode