[Johnny got his gun]

// Name of setinfo which should store a password on a client // (Example: setinfo _pw "password") amx_password_field "_pw"

Ok password for admins are still stored using this "setinfo" thing, right. Maybe it should be changed for coming versions, as using setinfo is anything but secure. Not that I use setinfo myself (only use steam ids) but I guess if this feature is there some people could actually use it and it could be bad.

I don't know another solution but maybe we could have the string encrypted.

[BAILOPAN]

It would be nice to have a little application people can run to add/subtract users easily, removing the overhead of editing users.ini. That way people can select the options and see what's going on instead of referencing the users.ini file... easy VB abb (for windows, possibly ncurses for linux). That would also make encryption easier as the app could just write an ciphered string instead of letting AMX cipher it and then send it out.

[Manip]

If you like, I'll wip one up for Win32 + XServer

[Phreak]

The idea came up some times in the amx forums.
But I think they never worked out.

I think the most common situation is still only ftp/web interface access to the rented gameserver.
So maybe you want to add ftp support if you really want to write an application for it.

I started writing something for it in php, but never tested it thouroughly enough to publish it.

[SniperBeamer]

server admins should change the cvar amx_password_field (this makes it nearly impossible to get the password)

[Johnny got his gun]

/* Get whole buffer containing keys and their data. */ native get_info_keybuffer(id, buffer[], length);

Native from my jghg2 module... it gets the whole buffer. You dont need to specify a key. Keys and key values are separated by \s only so its very readable. Its easy to read all of whats in there. Some is easy to spot as passwords, some might not, however it is there. Yes it still is harder if you specify pw field like "_coffee" and nothing like "_password", "_pw" etc... but anyway, not safe.

[SniperBeamer]

ok but most of the users don't need to set a password because they can set their steam-/won-id

[FireMaster]

It would be very nice, i even can stand on my knees and pray you guys, to add the functions to allow limiting access by IP, the way like djeyl`s P2 did it, becouse this is the thing i miss very much... AMX also didn`t have such an ability, some guys tried to write plugins but they all were buggy and stuff, so my only hope are you guys. Thx in advance.

[_KaszpiR_]

as far as i know ip number works but client must have a static ip
even the masking works
i got no idea if subnet masks work too

[FireMaster]

Yes, of course static ips, becouse this feature is needed for LAN parties mainly.