RC login with account/communityname

xXziroXx · #1 10-03-2010, 03:43 PM

Could it be made so you can use the external RC with your community name or email? The same thing works on the client, would only make sense to have it work for RC.

MrDumbledore · #2 10-03-2010, 05:26 PM

On a related note, do you need to add the community name or account to staff= to allow access?

xXziroXx · #3 10-03-2010, 05:31 PM

Quote:

Originally Posted by MrDumbledore

On a related note, do you need to add the community name or account to staff= to allow access?

Community name.

MrDumbledore · #4 10-03-2010, 05:32 PM

Quote:

Originally Posted by xXziroXx

Community name.

That should be changed to account. Community names are essentially changeable and it's a security flaw (even if a small one).

Sorry for jacking your thread btw

xXziroXx · #5 10-03-2010, 05:34 PM

Quote:

Originally Posted by MrDumbledore

That should be changed to account. Community names are essentially changeable and it's a security flaw (even if a small one).

That's been requested for years now. It's stupid that you have to add community name to serveroptions, but you set rights on the account name.

Rufus · #6 10-03-2010, 05:55 PM

Quote:

Originally Posted by MrDumbledore

That should be changed to account. Community names are essentially changeable and it's a security flaw (even if a small one).

How is it a security flaw?

MrDumbledore · #7 10-03-2010, 05:57 PM

Quote:

Originally Posted by Rufus

How is it a security flaw?

They are changeable so if you have "SuperMan" in your staff= and he gets a change, and then someone else gets a change to "SuperMan", they have RC.

Rufus · #8 10-03-2010, 06:04 PM

Quote:

Originally Posted by MrDumbledore

They are changeable so if you have "SuperMan" in your staff= and he gets a change, and then someone else gets a change to "SuperMan", they have RC.

These SuperMen are going to have the same IP/PCID?

MrDumbledore · #9 10-03-2010, 06:05 PM

Quote:

Originally Posted by Rufus

These SuperMen are going to have the same IP/PCID?

Rights are set via account, therefore the "fake" SuperMan would have *.*.*.* as his IP.

Rufus · #10 10-03-2010, 06:09 PM

Quote:

Originally Posted by MrDumbledore

Rights are set via account, therefore the "fake" SuperMan would have *.*.*.* as his IP.

Then he'd have to convince the staff team (that are apparently unaware that SuperMan1 had his community name renamed?) and do it before SuperMan1 notices. Lmao.. I couldn't see this happening in the real world (ever) but I see your point.

MrDumbledore · #11 10-03-2010, 06:11 PM

Quote:

Originally Posted by Rufus

Then he'd have to convince the staff team (that are apparently unaware that SuperMan1 had his community name renamed?) and do it before SuperMan1 notices. Lmao.. I couldn't see this happening in the real world (ever) but I see your point.

In general security holes shouldn't be left open due to a low probability of them being exploited, but yes, it is unlikely.

Deas_Voice · #12 10-04-2010, 11:01 AM

Quote:

Originally Posted by MrDumbledore

They are changeable so if you have "SuperMan" in your staff= and he gets a change, and then someone else gets a change to "SuperMan", they have RC.

that's what IP Range is for, to prevent such thing.

salesman · #13 10-04-2010, 05:06 PM

Quote:

Originally Posted by Deas_Voice

that's what IP Range is for, to prevent such thing.

Quote:

Originally Posted by MrDumbledore

Rights are set via account, therefore the "fake" SuperMan would have *.*.*.* as his IP.

Tigairius · #14 10-04-2010, 07:03 PM

Major issue with RC & communityname/account names:

/openrights communityname doesn't work. You have to add their communityname to server options as staff, but then to open their rights you have to do /openrights Graal######. It's a bit annoying to do.

MrDumbledore · #15 10-04-2010, 07:22 PM

Quote:

Originally Posted by Tigairius

Major issue with RC & communityname/account names:

/openrights communityname doesn't work. You have to add their communityname to server options as staff, but then to open their rights you have to do /openrights Graal######. It's a bit annoying to do.

Indeed. Also see this thread.