Updates for GServer and NPCServer

Ajira · #1 09-16-2005, 05:17 AM

Quote:

Originally Posted by ForgottenLegacy

The ability for anyone and everyone who has access to a weapon script to set anyone's rights, regardless if they have that ability or not. I saw it abused once by a staffer who was fired, to get back at the Admins. It was a pretty nasty little bug, and it was basically with a clientrc + sendtext that a person could set someone's rights.

Oh you mean the sendtext() rights worked without having the edit rights right? @_@ wowsers

ForgottenLegacy · #2 09-16-2005, 05:23 AM

Quote:

Originally Posted by Ajira

Oh you mean the sendtext() rights worked without having the edit rights right? @_@ wowsers

Yup. Worked like a cham. Would remove every single right you shared with that person, including clearing their IPRange (so they couldn't sign on) and their Folderrights. Was a nasty little bug.

This was said on Exploit RC when I brought this bug to Stefan's attention:

Quote:

Kaidenn: This is the SetRights bug.
Kaidenn: I would like it fixed before it is abused. x-x
dnd: hmmm
dnd: evil yes
ShadowBlaze - DND WORKING: lol
Kaidenn: Indeed.

ChibiChibiLuc · #3 09-16-2005, 08:39 PM

Quote:

Originally Posted by Ajira

Oh you mean the sendtext() rights worked without having the edit rights right? @_@ wowsers

Come on Ajira, after all that bragging about being able to take over servers? >_>

But yeah, since this is my post for the day, I have a request:
Could a command that lets us access offline accounts be added

Ajira · #4 09-17-2005, 05:06 AM

Quote:

Originally Posted by ChibiChibiLuc

Come on Ajira, after all that bragging about being able to take over servers? >_>

But yeah, since this is my post for the day, I have a request:
Could a command that lets us access offline accounts be added

Actually, I was thinking a different way, didn't know it just worked with sendtext.