Search found 3 matches

by ensiform
Tue Oct 09, 2007 8:51 am
Forum: Freewares, game mods, Java, C++, OCaml & Maths
Topic: BaseJKA Security Fix
Replies: 152
Views: 353193

Re: BaseJKA Security Fix

Btw there are some other userinfo things you can take into account... 1) trap_GetUserinfo should not give a string that has a length of less than 1. 2) trap_GetUserinfo string char [0] must be a \ ( '\\' ) 3) trap_GetUserinfo string length-1 must not be a \ ( '\\' ) 4) Count up total number of \'s i...
by ensiform
Sun Sep 30, 2007 4:35 am
Forum: Freewares, game mods, Java, C++, OCaml & Maths
Topic: BaseJKA Security Fix
Replies: 152
Views: 353193

Re: BaseJKA Security Fix

Gamall wrote:That is what I suspected was happening, which I why I asked if the IP was, by any chance, stored in another place -- hopefully more reliable -- than userinfo :?.
Sadly there is not. :bobo
by ensiform
Fri Sep 28, 2007 4:16 am
Forum: Freewares, game mods, Java, C++, OCaml & Maths
Topic: BaseJKA Security Fix
Replies: 152
Views: 353193

Re: BaseJKA Security Fix

FYI the ip in the userinfo is only reliable during ClientConnect (usually only the first connect) due to a bug in the version of the engine plus thereafter a client can spoof that value with setu command anyway. Also if the userinfo string is too big the ip will end up not getting added to the useri...