-
Major script exploit found in 0.1.0 tree!
A major bug was reported to me today with regards to an exploit utilizing the daemons ability to seperate commands with a semi-colon. I won't go into detail to much, but suffice it to say, it's quite nasty. If you are using the CVS version, please update to the latest version of hlds-mon once I get it commited. I'm going to check the release version for the same bug and correct that if it exists there.
If you are a server admin and would like more information regarding the nature of the exploit, feel free to send me an email at mordecai@teleport.com.
2000-12-15 04:31:30 UTC by m0rdecai
-
0.2.0 features
These are some things I am shooting for in 0.2.0, I would really prefer some suggestions/comments regarding this.
1) Colorizing configuration. Yes, my eyes are not yours, I understand that, but this is a little more of an ordeal than I want to put the effort into for 0.1.0 - those familiar with BBS systems will be very happy with our pipe coded color setup. (which is what we implement internally)
2) Better data storage methods - this is something I intended (and initally wrote) for our 0.0.1 release, but is a rather large ordeal and I plan to push this into 0.2.0 before I die :) - hash size will increase some but the end result will be a higher level of capability for the script in general.
3) some statistics method - I still have yet to talk to mordecai about this, but it WILL exist, but we're just not sure how yet.
2000-12-09 15:41:52 UTC by belman
-
0.1.0 near release
Ok, 0.1.0 is pretty much done, there are some minor bugs to work out, mainly to do with the new wonid tracking.
Major features in 0.1.0 include:
Improved Console Reporting - Items are now delimited with a 4 character identifier, color codes (for those with colors toggled), and the data pre-formatted. Items that are not parsed use NAME as the identifier
WONID based persistent tracking - From now on, all TK's will be tracked by wonid, and are expired only if the player is online. If a player disconnects, and reconnects, TK's are maintained and are only reset if the user is banned or the script is terminated. So far we have not seen any issues with the memory usage IRT the (significantly) increased hash size this creates. Currently though, there are issues with users who share a WONID, as forgive tk/show tk are not working as expected in those cases
Readline support - I cannot recall offhand if this was in 0.0.1, so I'll reiterate it. Readline allows for a history in the console, just like your console irc client (in fact, it's the same code at work). This option is pretty crude and somewhat experimental, and may cause your console to not respond properly in some cases (ie, screen has been known to have issues with certain readline implementations). More in the readme.
2000-12-09 15:36:17 UTC by belman
-
0.1.0 and initial 0.0.1 'release'
0.1.0 is in alpha, and shouldn't contain any major caveats now.
we should be releasing a tarball of 0.0.1 in a few days. check freshmeat for an announcement, or here.
2000-11-16 23:18:47 UTC by belman
-
Notes regarding 1.5 snap of 0.0.1
I forgot something very important in the CVS log:
R_TKTOTAL is actually compared now.
2000-08-25 07:59:39 UTC by belman
