npcserver shouldn't have global disconnect right

benpoke103 · #1 02-27-2010, 01:03 AM

As stated above, due to the ability of disconnecting by command line, this opens up an obvious security hole which has potential for major abuse.

Note: the most obvious ways to abuse this have been tested and confirmed by myself.

cbk1994 · #2 02-27-2010, 01:09 AM

I'd rather see security features added rather than simply disabling it. For example, making it impossible to disconnect RCs.

benpoke103 · #3 02-27-2010, 01:15 AM

Quote:

Originally Posted by cbk1994

For example, making it impossible to disconnect RCs.

If you ask me, that's an even more higher security risk

WhiteDragon · #4 02-27-2010, 01:17 AM

Just to clairify, this means that it is impossible to prevent npcserver from disconnecting players. Even if you untick the box under (npcserver).

It should just inherit disconnect permissions from its rights like everything else.

benpoke103 · #5 02-27-2010, 01:19 AM

Quote:

Originally Posted by WhiteDragon

It should just inherit disconnect permissions from its rights like everything else.

What I was trying to declare (apparently, poorly) in my first post.

cbk1994 · #6 02-27-2010, 01:39 AM

Quote:

Originally Posted by WhiteDragon

It should just inherit disconnect permissions from its rights like everything else.

This sounds perfect.

fowlplay4 · #7 02-27-2010, 02:24 AM

Ah, guess this is going to get fixed anyway.. I can totally disconnect Globals with it.

benpoke103 · #8 07-07-2010, 09:14 AM

Bump. This really should be resolved.

TSAdmin · #9 07-07-2010, 09:56 AM

It's already resolved.

fowlplay4 · #10 07-21-2010, 07:06 AM

This is not resolved.

PHP Code:


			
*Bell: I'm beginning to think nobody loves me anymore

JerretNPC: sendtorc(/disconnect Bell)

(npcserver) disconnects Bell

RC disconnected: Bell

NC disconnected: Bell

also

PHP Code:


			
JerretNPC: sendtorc(/disconnect (npcserver))

(npcserver) disconnects (npcserver)

Bell has globally banned DarkSeer

Ban type: Event Interruption

Ban time: 3 days and 0 hours

Reason: dcing me

Cloven · #11 07-21-2010, 07:46 AM

I can't help but laugh at that.

Bell · #12 07-21-2010, 07:52 AM

It may of been Jerret that disconnected me but it was Darkus fault for starting the war! I've emailed Stefan about it though. TSA said it wasn't working on Era but its obviously still working on Zodiac.

Must be fixed, I might think people hate me or something and get all emotional about it.

cbk1994 · #13 07-21-2010, 07:55 AM

When was the last time you restarted Zodiac's NPC-server?

fowlplay4 · #14 07-21-2010, 07:57 AM

Well..

JerretNPC is a pretty kewl guy eh disconnects Bell and doesn't fraid of anything.

It's a good thing Zodiac that I-have/has crashed enough that the (npcserver) restarts automatically.

Crono · #15 07-21-2010, 08:15 AM

Quote:

Originally Posted by cbk1994

When was the last time you restarted Zodiac's NPC-server?

oh jerret just had it disconnect itself