Clientrc abuse

[Twinny]

This seemed the best spot to post this but move it to wherever it is best suited.

I just recently found (and tested) that I could use a weapon to use someones clientrc to give myself all their rights (if they had setrights) then remove everyone elses rights online. If used on someone with full rights, this becomes quite bad. When I questioned Skyld, he told me this was a known problem but there is quick fix solution. I figured every server should know about this since anyone could abuse clientrc. Simply add this to the servers options.

restrictclientrctoweapons=npc name(s)

eg. if you want to have an actual clientrc,
restrictclientrctoweapons=-Clientrc
This with -rw WEAPONS/-Clientrc in player rights will help protect against unwanted abuse from players.

If you don't want anything to use clientrc,
restrictclientrctoweapons=-Playerlist (cause playerlist won't be using it)
or perhaps
restrictclientrctoweapons=0

Simply but effective quick fix .

[zokemon]

Good job Twinny!

[Devil]

This happened to be on a server about a month ago, no one believed me.

One of the nat's gave himself full rights with a NPC, and the manager with full rights was on, then he kicked/fired/banned me, when I had a lot more rights than him.

[Inverness]

What server? I need something to laugh at.

[napo_p2p]

I've added this to the Graal Bible list of known server options.

Nice post, Twinny .

[Devil]

Originally Posted by Inverness

What server? I need something to laugh at.

I don't have Graal installed anymore, but it was the server which got Hosted by accident, they PMed Stefan to change their server name, to another server, then host them and he done it. Then I was hired to fix some of the staff issues and one of the stupid NAT's pulled that **** on me.

[Andy0687]

This was the bug yen used to switch his rights and stuff on Zodiac, so its not new.