Juice 51ede1097d
admincmd.sma exploits fix (#822)
* [admincmd.sma] Fix typo in isCommandArgSafe

'

* [admincmd.sma] Update amx_cvar command handler

- Fix exploiting of "mapchangecfgfile" cvar to execute potentially dangerous console commands
- Add newline delimiter check and restrict for ****cfgfile cvars values

* Restrict having ".." character sequence in amx_map command argument

Fixes exploit on Windows servers that allows executing potentially dangerous console commands

* Do not allow admins to change cvars with FCVAR_SPONLY flag when not in singleplayer via amx_cvar

1. Make amx_cvar command obey FCVAR_SPONLY flag.
2. Fix exploiting of amx_nextmap cvar value which is used in nextmap plugin.
2020-05-29 01:10:38 +02:00
2020-05-29 01:10:38 +02:00
2015-03-10 11:11:49 +02:00
2015-03-09 22:53:58 +01:00
2020-03-04 21:10:41 +01:00
2018-09-11 00:48:15 +02:00
2018-09-04 19:31:23 +02:00

AMX Mod X is a Metamod plugin for Half-Life 1. It provides comprehensive scripting for the game engine and its mods. Scripts can intercept network messages, log events, commands, client commands, set cvars, modify entities, and more. AMX Mod X also has a system for extending native scripting through modules, leading to outside support for things like MySQL and Sockets.

General

Development

Description
AMX Mod X - Half-Life 1 Scripting and Administration
Readme 245 MiB
Languages
C 37.4%
C++ 24%
Pascal 18.4%
HTML 5.7%
Roff 4.8%
Other 9.7%