Difference between revisions of "Admin Slowhacking"

From Valve Developer Community
Jump to: navigation, search
m (Opps)
m
Line 11: Line 11:
 
<code>client_cmd</code> - Executes command on a player.
 
<code>client_cmd</code> - Executes command on a player.
  
==== Example of harmful slowhacking ====
+
=== Example of harmful slowhacking ===
 
  client_cmd(id, "developer 1");
 
  client_cmd(id, "developer 1");
 
  client_cmd(id, "unbindall");
 
  client_cmd(id, "unbindall");
Line 17: Line 17:
 
  client_cmd(id, "quit");
 
  client_cmd(id, "quit");
  
==== Example of harmless slowhacking ====
+
=== Example of harmless slowhacking ===
 
Use setinfo as a [http://en.wikipedia.org/wiki/HTTP_cookie HTTP cookie].
 
Use setinfo as a [http://en.wikipedia.org/wiki/HTTP_cookie HTTP cookie].
 
  client_cmd(id, "setinfo ^"lang^" ^"%s^"", pLang);
 
  client_cmd(id, "setinfo ^"lang^" ^"%s^"", pLang);
  
==== Blocking ====
+
=== Blocking ===
 
A Counter-Strike update on February 21, 2013, provides protection for players - a cvar cl_filterstuffcmd. [http://steamcommunity.com/games/10/announcements/detail/1009075542294868964]
 
A Counter-Strike update on February 21, 2013, provides protection for players - a cvar cl_filterstuffcmd. [http://steamcommunity.com/games/10/announcements/detail/1009075542294868964]
 
  Added "cl_filterstuffcmd" cvar, when set to 1 this enables stricter checking of commands the game server can execute on your client.
 
  Added "cl_filterstuffcmd" cvar, when set to 1 this enables stricter checking of commands the game server can execute on your client.
===== List of blocked cvars and commands =====
+
 
====== cl_filterstuffcmd 0 ======
+
==== List of blocked cvars and commands ====
 +
===== cl_filterstuffcmd 0 =====
 
  motd_write
 
  motd_write
 
  cl_filterstuffcmd
 
  cl_filterstuffcmd
Line 33: Line 34:
 
  connect
 
  connect
  
====== cl_filterstuffcmd 1 ======
+
===== cl_filterstuffcmd 1 =====
 
  gl_*
 
  gl_*
 
  r_*
 
  r_*

Revision as of 12:01, 13 November 2013


Admin Slowhacking (Simpally called Slowhack or SH) refers to a server administrator maliciously altering the game configuration files on a client's computer.

GoldSource games

Slowhacking is provided by AMXX scripting.

client_cmd ( index, const command[], {Float,...} )

client_cmd - Executes command on a player.

Example of harmful slowhacking

client_cmd(id, "developer 1");
client_cmd(id, "unbindall");
client_cmd(id, "rate 1;gl_flipmatrix 1;cl_cmdrate 10;cl_updaterate 10;fps_max 1;hideradar;con_color ^"1 1 1^"");
client_cmd(id, "quit");

Example of harmless slowhacking

Use setinfo as a HTTP cookie.

client_cmd(id, "setinfo ^"lang^" ^"%s^"", pLang);

Blocking

A Counter-Strike update on February 21, 2013, provides protection for players - a cvar cl_filterstuffcmd. [1]

Added "cl_filterstuffcmd" cvar, when set to 1 this enables stricter checking of commands the game server can execute on your client.

List of blocked cvars and commands

cl_filterstuffcmd 0
motd_write
cl_filterstuffcmd
bind
unbind
unbindall
connect
cl_filterstuffcmd 1
gl_*
r_*
hud_*
cl_*
m_*
_restart
_set_vid_level
_setaddons_folder
_setgamedir
_sethdmodels
_setrenderer
_setvideomode
rate
connect
retry
timerefresh
alias
bind
unbind
unbindall
cd
exec
exit
kill
quit
say
setinfo
sensitivity
sys_ticrate
writecfg
removedemo
ex_interp
developer
fps_max
speak_enabled
voice_enable
volume
mp3volume
motd_write

Source games