Clientrc abuse

[Twinny]

This seemed the best spot to post this but move it to wherever it is best suited.

I just recently found (and tested) that I could use a weapon to use someones clientrc to give myself all their rights (if they had setrights) then remove everyone elses rights online. If used on someone with full rights, this becomes quite bad. When I questioned Skyld, he told me this was a known problem but there is quick fix solution. I figured every server should know about this since anyone could abuse clientrc. Simply add this to the servers options.

restrictclientrctoweapons=npc name(s)

eg. if you want to have an actual clientrc,
restrictclientrctoweapons=-Clientrc
This with -rw WEAPONS/-Clientrc in player rights will help protect against unwanted abuse from players.

If you don't want anything to use clientrc,
restrictclientrctoweapons=-Playerlist (cause playerlist won't be using it)
or perhaps
restrictclientrctoweapons=0

Simply but effective quick fix .