banimod / etpro / ettv forums

Posted: **Tue Apr 15, 2008 3:03 pm**

Yes, I mistakenly tested that against a later version, and then my internets died

Posted: **Mon Apr 21, 2008 2:31 pm**

Posted: **Mon Apr 21, 2008 7:26 pm**

once again, thank you

Posted: **Mon May 05, 2008 11:16 pm**

does anyone have any closer contact with the clanbase admins? because the updated lua-module is useless uptodate because its ID isnt allowed in any league yet (because they havent released new configs)

Posted: **Mon May 05, 2008 11:57 pm**

clanbase is teh suq anyway (IMO)
some kind of world leader pretend stuff

Posted: **Tue May 06, 2008 2:45 am**

well.. agree to that. sadly im just administering the servers and kinda dont really care, which leagues the clan plays

Posted: **Wed May 07, 2008 8:59 pm**

etpro is not only for leagues servers, tbh there are more pub on which even more players are playing, so dnt say its useless. CB as an organization can be so called

Posted: **Mon May 26, 2008 1:14 pm**

i am in contact with clanbase and they will hopefully release a new configpack with some fixes within the next 1-2-3 weeks

Posted: **Mon Aug 18, 2008 2:40 am**

UPDATE August 1 2008
etadmin_mod can be tricked into giving people with certain names admin access. See http://www.snl-clan.com/forum/viewtopic.php?f=9&t=9789 for a workaround.

ty SNL|Lucel|STA

I fixed it via lua in ACpro in the day when it was discovered:

click

Posted: **Thu Jan 15, 2009 10:52 pm**

New update, see first post.

Posted: **Sat Jan 17, 2009 12:57 am**

Many thanks

Posted: **Mon Jan 19, 2009 3:11 pm**

ReyalP wrote:New update, see first post.

I checked this on the server and it says:

Code: Select all

invalid string bla bla

2nd of all u can vote only on specified votes?

Posted: **Wed Feb 11, 2009 7:27 pm**

is there a fix for the ^ at end of name outside of ACPro?

Posted: **Thu Feb 12, 2009 4:36 pm**

roissgil wrote:is there a fix for the ^ at end of name outside of ACPro?

http://www.snl-clan.com/forum/viewtopic.php?f=9&t=9789

Btw can anyone confirm me that the last update is really necessarry? Coz i checked this and ET is already patched for those bugs, am i right?

edited:

I made updated version of combinedfixes with name fix if u want. Here u go a link: http://acpro.wolfteam.pl//file.php?id=11 (haven't tested it yet, but should be working)

Posted: **Fri Feb 20, 2009 9:46 am**

I heard that some ET server got hacked because of the vote exploit. So its working, but with hacked client. Btw i think i found a little typo in your code Reyalp

:

if cmd == "callvote" or cmd == "ref" or cmd == "sa" or cmd == "semiadmin" then
local args=et.ConcatArgs(1)
-- et.G_LogPrint(string.format("combinedfixes: client %d %s [%s]\n",cno,cmd,args))
if string.find(args,"[\r\n]") then
et.G_LogPrint(string.format("combinedfixes: client %d bad %s [%s]\n",cno,cmd,args))
return 1;
end
return 0
end

There is additional ; char, which belongs to language C

an i guess will create an error in lua...I dnt know why even if i fix your code it is still not working...So i modified your code a bit:

Code: Select all

function et_ClientCommand&#40;cno,cmd&#41;

local msg = ""
local cmd = string.lower&#40;cmd&#41;
local args = et.ConcatArgs&#40;1&#41;
local arg1 = et.trap_Argv&#40;1&#41;
	
	if cmd == "ws" then
	   local n = tonumber&#40;arg1&#41;
		if not n then
			et.G_LogPrint&#40;string.format&#40;"wsfix&#58; client %d bad ws not a number &#91;%s&#93;\n",cno,tostring&#40;arg1&#41;&#41;&#41;
			return 1
		end

		if n < 0 or n > 21 then
			et.G_LogPrint&#40;string.format&#40;"wsfix&#58; client %d bad ws %d\n",cno,n&#41;&#41;
			return 1
		end
		return 0
	end

-- modified code from Reyalp
 if cmd == "callvote" or cmd == "ref" or cmd == "sa" or cmd == "semiadmin" then
    local _, counts = string.gsub &#40;args, "%s", ""&#41;  -- count spaces
    
    if counts > 1 then
       msg = string.format&#40;"cpm  \"Remove additional spaces!\n"&#41;
       et.trap_SendServerCommand&#40;cno, msg&#41;
       return 1
    end
    
     if string.find&#40;args,"%\\"&#41; or string.find&#40;args,"%;"&#41; then
       msg = string.format&#40;"cpm  \"Invalid string!\n"&#41;
       et.trap_SendServerCommand&#40;cno, msg&#41;
       return 1
     end
     
  return 0
  end
  
  return 0
end

This will catch any character \ and any additional spaces in callvote parametr. For those who wants to use combinedfixes.lua modified by me I gave a link above. And for those who runs ACpro i made a quick fix too (same source wolfteam.pl). New ACpro is still under construction.

banimod / etpro / ettv forums

UPDATE Jan 15 09 - exploits actively abused