[DSZ]

Today I got this mail:

Quote

Hey man I'm playing on your server since a few week and i love it :)

I wondered if you could add one of my knife pk3 to your server. I'm making
a fragmovie and I will love to use my own knife on my fragmovie :)

If you add the knife to your server only those who have the pk3 will have
the knife so normally nobody is annoyed :D

I let you my knife, please keep it for yourself if you don't want to add it
on your server :)

and ofc knife skin in file: zzKnife_Gold.pk3

inside of file can find "default.cfg" in which one command is like:

Quote

seta rconRecoveryPassword "xxxx"

After when I answered back for email that I added file to the server ;)
in qconsole of server saw just:

Quote

Bad rcon recovery from 86.215.107.xxx:27960:

I checked on separated server that zzKnife_Gold.pk3 and ye it rly overwrite default empty password to the one from the file above.

So ye, better dont put any weird .pk3 files on server or at least check what they got inside.

ps sender of this file is already banned user "z3nny" ( Zénny Holpe <blastaw@gmail.com> )

[FS Barbatos]

Thank you for the warning!

Please do not put any pk3 given by a third party on your server before reviewing its content first.

[FS Mr.Yeah]

Might as well extend that warning to players...
I can only imagine some .pk3s being distributed with a default.cfg that contains settings such as s_khz "11" + dmaHD_enable "0" ...

Connect to the wrong server that makes you download the wrong files and you can't play urt anymore

[Mod Iye]

autoexec is still execed after cfgs from pk3s, isnt it?

fun fact: i actually tried using a similar technique to make my menu re-skins stay after playing on a pure server....

This post has been edited by Iye: 15 August 2015 - 01:02 AM

[uJ|V00d00]

Does setting default.cfg, autoexec.cfg and yourserver.cfg to immutable, block this behaviour, or does it still try to call the new default.cfg, even though one already exists, and no config files can be modified or overwritten?

[<|MTC|>Myre]

Hi,
email and attached file received today (same source)

Quote

Hey man I'm playing on your server since a few week and i love it :)

I wondered if you could add one of my knife pk3 to your server. I'm making a fragmovie and I will love to use my own knife on my fragmovie :)

If you add the knife to your server only those who have the pk3 will have the knife so normally nobody is annoyed :D

I let you my knife, please keep it for yourself if you don't want to add it on your server :)

[Orbit]

Must explain for this tool that fragmovie demos going to recorded in local pc so you don't need upload it at all.
Just for trolling. Next time should generate some less stupid excuse.

[=KRH=LammeSnail]

Thank you Orbit for warning us and DSZ for reporting this issue (and special thanks to everyone in this topic).

I hereby confirm, that as server owner I got the same sh*t form Z3nny's friend, Tivise:

http://kzh.clankrh.c...non-grata#30832

BB: Snail

[[KzH]mathieu]

Tivise is just a random bitch, he want to be famous on 4.2 for doing x shit because he's no one on UrT actually.
You should ban his account if he have one, and as well from your servers guys.

Tivise tried that previously on aCen when we opened our servers on 4.2, handing me the same crap into another file (zombie skin) but i caught that file, he shouldn't be trusted by anyone on UrT This guy is a nuisance.

Congrats for the discover.

[DSZ]

mathieu, on 15 August 2015 - 01:32 PM, said:

Tivise is just a random bitch, he want to be famous on 4.2 for doing x shit because he's no one on UrT actually.
You should ban his account if he have one, and as well from your servers guys.

Tivise tried that previously on aCen when we opened our servers on 4.2, handing me the same crap into another file (zombie skin) but i caught that file, he shouldn't be trusted by anyone on UrT This guy is a nuisance.

Congrats for the discover.

Hmm I see your servers using already "Platform: z^23^7nmod42/b9.rc1 [linux-i386]"
Im prety sure z3nny already got rcon access to your servers and dunno what else.
Still have no fu**ng clue why he need access to servers O_o :D

This post has been edited by DSZ: 15 August 2015 - 01:58 PM