Raised This Month: $165 Target: $400
 41% 

Does SM has any prevention from copy by another plugins?


Post New Thread Reply   
 
Thread Tools Display Modes
Author Message
ZASTRELIS
Veteran Member
Join Date: Nov 2010
Location: Siberia, Irkutsk
Old 01-05-2021 , 09:42   Does SM has any prevention from copy by another plugins?
Reply With Quote #1

For example I granted FTP access to somebody, and I use `custom folder` in `plugins`.
But this `somebody` can upload trick-plugin which can helps to get able downloading all entries from SM dirs..

Last edited by ZASTRELIS; 01-05-2021 at 09:54.
ZASTRELIS is offline
TomL.
Senior Member
Join Date: Oct 2017
Location: Germany
Old 01-05-2021 , 09:52   Re: Does SM've any prevention from copy by another plugins?
Reply With Quote #2

That's very unlikely.
If you don't trust someone don't give them any kind of access.
TomL. is offline
ZASTRELIS
Veteran Member
Join Date: Nov 2010
Location: Siberia, Irkutsk
Old 01-05-2021 , 09:56   Re: Does SM has any prevention from copy by another plugins?
Reply With Quote #3

or install from sources after self-checking :\ ok
Is anyway to remove databases.cfg to another dir? I need give access to configs, with db omit can use symlinks symlinks can be modified

Last edited by ZASTRELIS; 01-05-2021 at 10:03.
ZASTRELIS is offline
TomL.
Senior Member
Join Date: Oct 2017
Location: Germany
Old 01-05-2021 , 10:11   Re: Does SM has any prevention from copy by another plugins?
Reply With Quote #4

You can edit the path for database.cfg in the source files and then compile it.
TomL. is offline
ZASTRELIS
Veteran Member
Join Date: Nov 2010
Location: Siberia, Irkutsk
Old 01-05-2021 , 10:20   Re: Does SM has any prevention from copy by another plugins?
Reply With Quote #5

Quote:
Originally Posted by TomL. View Post
You can edit the path for database.cfg in the source files and then compile it.
Can we apply this by default in next release? With db folder path in core.cfg
It would be a good..

Last edited by ZASTRELIS; 01-05-2021 at 10:26.
ZASTRELIS is offline
DarkDeviL
SourceMod Moderator
Join Date: Apr 2012
Old 01-05-2021 , 22:56   Re: Does SM has any prevention from copy by another plugins?
Reply With Quote #6

Quote:
Originally Posted by ZASTRELIS View Post
It would be a good..
No, it wouldn't.

Your friend, who apparently cannot be trusted (and therefore should not have any access at all), will simply be looking in this other directory for your configuration, and will still be able to access it.

You are not adding any security by trying to hide something that is still accessible.



^ Just like this door (from asktheadmin.wordpress.com) isn't any good either.

Hint: People will just jump over the very tiny bushes, ...
__________________
Mostly known as "DarkDeviL".

Dropbox FastDL: Public folder will no longer work after March 15, 2017!
For more info, see the [SRCDS Thread], or the [HLDS Thread].
DarkDeviL is offline
ZASTRELIS
Veteran Member
Join Date: Nov 2010
Location: Siberia, Irkutsk
Old 01-06-2021 , 06:53   Re: Does SM has any prevention from copy by another plugins?
Reply With Quote #7

Source MoD allow access to files over its own root? such as csgo root dir, etc.?

Last edited by ZASTRELIS; 01-06-2021 at 06:54.
ZASTRELIS is offline
asherkin
SourceMod Developer
Join Date: Aug 2009
Location: OnGameFrame()
Old 01-06-2021 , 09:50   Re: Does SM has any prevention from copy by another plugins?
Reply With Quote #8

Quote:
Originally Posted by ZASTRELIS View Post
Source MoD allow access to files over its own root? such as csgo root dir, etc.?
Yes
__________________
asherkin is offline
Crasher_3637
AlliedModders Donor
Join Date: May 2012
Old 01-06-2021 , 09:59   Re: Does SM has any prevention from copy by another plugins?
Reply With Quote #9

You're making it harder than it has to be. If you're so worried about untrustworthy people having access to private files, then don't give them any access at all. It's that simple.
__________________
AFK like JFK
Crasher_3637 is offline
Dragokas
Veteran Member
Join Date: Nov 2017
Location: Ukraine
Old 01-08-2021 , 02:53   Re: Does SM has any prevention from copy by another plugins?
Reply With Quote #10

Quote:
Originally Posted by ZASTRELIS View Post
But this `somebody` can upload trick-plugin which can helps to get able downloading all entries from SM dirs..
Surely, he can.

Quote:
Originally Posted by ZASTRELIS View Post
or install from sources after self-checking :\ ok
Is anyway to remove databases.cfg to another dir? I need give access to configs, with db omit can use symlinks symlinks can be modified
You can create a new FTP user for your friend.
For all your configs you would like to grant access, you can try replace original file with a symlink pointing to somewhere outside the game folder, where you'll provide full access for that particular new user + user your game is running with. After that, remove "Other groups" read/write access in DACL of your game folder recursively (in some cases, revoke "Groups" access as well).

Actually the same works in a vice versa way. Make full access only for particular files, and make symlinks on user's folder side. Hijacking symlinks make no sense since you blocked any access to your game folder recursively.
__________________
Expert of CMD/VBS/VB6. Malware analyst. L4D fun (Bloody Witch) (my New server L4D2)
[My plugins] [My tools] [GitHub] [Articles] [Donate]
Dragokas is offline
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 09:53.


Powered by vBulletin®
Copyright ©2000 - 2021, vBulletin Solutions, Inc.
Theme made by Freecode