• Print

Author Topic: ULX and DarkRP exploit  (Read 18 times)

0 Members and 1 Guest are viewing this topic.

Offline Megiddo

  • Ulysses Team Member
  • Hero Member
  • *****
  • Posts: 6214
  • Karma: 394
  • Project Lead
ULX and DarkRP exploit
« on: October 27, 2010, 08:06:21 am »
I thought this was kind of funny... nothing really we can do about it short of automatically kicking people with "command" names. DarkRP should really just prepend the string with stars or something...

http://www.facepunch.com/threads/1013446-DarkRP-Trollin?p=25389072&viewfull=1#post25389072
Experiencing God's grace one day at a time.

Offline Stickly Man!

  • Ulysses Team Member
  • Hero Member
  • *****
  • Posts: 1270
  • Karma: 164
  • What even IS software anymore?
    • XGUI
Re: ULX and DarkRP exploit
« Reply #1 on: October 27, 2010, 11:32:17 am »
Wow. That's actually pretty funny :P

Why do so many people use DarkRP and all of these ridiculous pointless mods to go with it? (I mean.. a mod where you can smoke a cigarette? wtfriggle?)

At least nobody's said this is all ULX's fault!

EDIT: Perhaps a good idea would be to warn connected admins (and console) when a player joins with a "!command" in their name? (or with "ulx command", also?)

Just display a tsay message that says "ULX: Warning! A player has connected with a name that resembles a ULX command. If you have any mods installed that handle usernames improperly, it could cause this command to execute!"
« Last Edit: October 27, 2010, 11:37:35 am by Stickly Man! »
Join our Team Ulysses community discord! https://discord.gg/gR4Uye6

Offline Megiddo

  • Ulysses Team Member
  • Hero Member
  • *****
  • Posts: 6214
  • Karma: 394
  • Project Lead
Re: ULX and DarkRP exploit
« Reply #2 on: October 27, 2010, 02:27:24 pm »
Found out it's caused by the 'drugzmod'. Perhaps we can detect on player join if they have drugzmod installed and someone with that name joins, warn the admins?
Experiencing God's grace one day at a time.

Offline JamminR

  • Ulysses Team Member
  • Hero Member
  • *****
  • Posts: 8096
  • Karma: 390
  • Sertafide Ulysses Jenius
    • Team Ulysses [ULib/ULX, other fine releases]
Re: ULX and DarkRP exploit
« Reply #3 on: October 27, 2010, 03:27:13 pm »
I'm tired of 1000 author or 500 time redone mods.
DarkRP is and has been for quite some time at the top of my list.

We'll end up getting blamed somewhere...we always do.
I say a news post needs to be made. "Yet another (DarkRP/Drugz,not ULX mod) exploit warning"

* JamminR goes off to cook dinner
"Though a program be but three lines long, someday it will have to be maintained." -- The Tao of Programming

Offline Megiddo

  • Ulysses Team Member
  • Hero Member
  • *****
  • Posts: 6214
  • Karma: 394
  • Project Lead
Re: ULX and DarkRP exploit
« Reply #4 on: October 27, 2010, 07:52:55 pm »
If you'd like to make an announcement, feel free, JamminR. :)
Experiencing God's grace one day at a time.

Offline JamminR

  • Ulysses Team Member
  • Hero Member
  • *****
  • Posts: 8096
  • Karma: 390
  • Sertafide Ulysses Jenius
    • Team Ulysses [ULib/ULX, other fine releases]
Re: ULX and DarkRP exploit
« Reply #5 on: October 28, 2010, 03:44:31 pm »
Give me more detail.
What's being exploited?
Player puts commands in name, does ?? to get command in name to run.
Is there a post somewhere I can link to showing it's not ULX fault?
Does it only affect certain version of Drugzmod, or all?
Only if the person also runs DarkRP?
etc etc etc.
I hate news with no detail.

Which reminds me
[rant]
My local news channel recently had this as a news blurb
"In New york city, a man was shot and killed at a popular restaurant. The reason is unknown"
That was it. No other details. I watched the local news website to see if there would be follow up.
There never was.
So, they didn't tell me what restuarant, and even if they did, I care why?
You mean to tell me people don't get shot every day in a town of millions?
[end rant]
"Though a program be but three lines long, someday it will have to be maintained." -- The Tao of Programming

Offline JamminR

  • Ulysses Team Member
  • Hero Member
  • *****
  • Posts: 8096
  • Karma: 390
  • Sertafide Ulysses Jenius
    • Team Ulysses [ULib/ULX, other fine releases]
Re: ULX and DarkRP exploit
« Reply #6 on: October 28, 2010, 07:18:01 pm »
Never mind. Read the actual link.
I'm not going to waste our news space with this.
It's darkRP and bad modding.
Sure, we could throw in some type of checks, but, I'd rather just keep telling people (if we get any complaints) to not use Cigarettes mod.

Cigarettes are bad for you. They should get over it.
"Though a program be but three lines long, someday it will have to be maintained." -- The Tao of Programming

  • Print