Page 1 of 1
Disabling Client-Side Commands
Posted: Thu Aug 14, 2008 3:36 am
by HeadShot
I need something to disable commands done client-side, if anyone has a pre-made mod or something. It'd be great if it was one where I could choose the commands to disable btw. Thanks.
Re: Disabling Client-Side Commands
Posted: Thu Aug 14, 2008 4:22 am
by Smirftsch
227 disables already some of the potential harmful commands. I don't think you will find a mod which is able to select the commands you want to disallow, some of the commands can't be simply disabled at all like this (well, in theory it MAY be possible, but this would require very heavy changes and hacks).
Which commands do you want to disable?
Re: Disabling Client-Side Commands
Posted: Mon Sep 01, 2008 12:42 am
by HeadShot
227 disables already some of the potential harmful commands. I don't think you will find a mod which is able to select the commands you want to disallow, some of the commands can't be simply disabled at all like this (well, in theory it MAY be possible, but this would require very heavy changes and hacks).
Which commands do you want to disable?
Completely forgot about my post here.
I wanted to get rid of the texture btranslucent true, the playerpawn lightbrightness/radius/type and etc. These can be used to have a unfair advantage in INF SO
Re: Disabling Client-Side Commands
Posted: Mon Sep 01, 2008 12:50 am
by Jâçkrâßßit
A client should be able to pick what music they want to play online regardless. I know this has no relevance to the above post, but as part of this topic, this is the right place to put this message
Re: Disabling Client-Side Commands
Posted: Mon Sep 01, 2008 4:09 am
by Smartball
227 disables already some of the potential harmful commands. I don't think you will find a mod which is able to select the commands you want to disallow, some of the commands can't be simply disabled at all like this (well, in theory it MAY be possible, but this would require very heavy changes and hacks).
Which commands do you want to disable?
Completely forgot about my post here.
I wanted to get rid of the texture btranslucent true, the playerpawn lightbrightness/radius/type and etc. These can be used to have a unfair advantage in INF SO
I believe this sort of stuff has been dealt with in 227. There is no mod that can do it effectively pre-227 due to the use of .txt files, and AFAIK the only mod that even makes an attempt to stop it is my own EDM. I don't think you're going to find anything that can do this as an add-on to pre-227 SO unless someone wrote a very hackish mod that repeatedly checked with timers, which still IMO is not sufficient.
Re: Disabling Client-Side Commands
Posted: Mon Sep 01, 2008 4:59 am
by []KAOS[]Casey
Set-anything commands don't work unless the next word is "input" online in 227
there is a workaround for this, but if you have a console-check or anticheat for bad consoles, then it should be damn-near impossible
Re: Disabling Client-Side Commands
Posted: Mon Sep 01, 2008 10:16 am
by Chaos13
Set Texture bTranslucent True will not work even if client will succeed doing it: cause of replication and bsp cutting. Last time i checked (7m ago) it looked like shit.
By the way iirc EDM does not stop Set commands completely due to a bug i found, but i am not telling here

Re: Disabling Client-Side Commands
Posted: Mon Sep 01, 2008 2:31 pm
by GreatEmerald
Jackrabbit is being ignored

But actually, I really think that the UT2004 music system is the best way of doing that - don't upload music from server as not everyone likes it, and it's additional large download that is useless anyway. And then also there's the Music Player inside that you can use to play music from other OGGs easily. Anything like that can be done here?
Re: Disabling Client-Side Commands
Posted: Mon Sep 01, 2008 7:30 pm
by Smartball
By the way iirc EDM does not stop Set commands completely due to a bug i found, but i am not telling here

There is no mod that can do it effectively pre-227.
AFAIK the only mod that even makes an attempt to stop it is my own EDM.
And just for the record, I was referencing the idea of putting commands in .txt files - not necessarily using the console set command. I'm aware of other mods that attempt to make the set command 'friendly' but I'm not aware of any mods that attempt to check for changed properties through the use of .txt files other than EDM. Even at that (as I stated) it is not done to my own satisfaction because it
cannot be done sufficiently pre-227.
Re: Disabling Client-Side Commands
Posted: Tue Sep 02, 2008 2:34 am
by Bane
How about in a subclass of playerpawn,
I put that in Hide and Seek and IIRC it blocked regular typing, execs, and commands typed in the console
Re: Disabling Client-Side Commands
Posted: Tue Sep 02, 2008 10:06 am
by Chaos13
How about
Level.ConsoleCommand("Set shit")? xD
or simple nametable shift
Re: Disabling Client-Side Commands
Posted: Tue Sep 02, 2008 1:54 pm
by Smartball
How about in a subclass of playerpawn,
I put that in Hide and Seek and IIRC it blocked regular typing, execs, and commands typed in the console
I think you're missing the point. I can also re-declare the "exec" console command to stop people from using .txt files, but that doesn't solve the problem. Set shouldn't be disabled, and neither should exec. But at the same time, so-called 'malicious' commands that can be executed with set and exec should be blocked, and therein lies the problem that exceeds UScript's capabilities. Leaving the commands in and checking stuff on the client is useless since that can be bypassed, which leaves it up to the server to perform the checks. And the server can't check effectively through UScript unless it's frequently requesting the values of whatever properties on the client are deemed "malicious," but this is not a foolproof system by any means either.
Basically the argument that I'm making is that these checks cannot be performed "sufficiently" pre-227, with my definition of "sufficient" being without additional lag, without any loss of non-malicious functionality, and with it being nearly impossible for someone to side-step the checks.
Re: Disabling Client-Side Commands
Posted: Tue Sep 02, 2008 2:27 pm
by Chaos13
You can always sidestep any non-native checks with useful ucc command. Moreover it is possible to successfully sidestep NATIVE (!!!) checks by compiling own dll (UTDC anyone?)
Thats simply in theory, i have not tried yet cause i have more important tasks in my TODO list.
Re: Disabling Client-Side Commands
Posted: Wed Sep 03, 2008 2:27 pm
by .:..:
Set-anything commands don't work unless the next word is "input" online in 227
Set-anything only works with config variables on 227 online games and not only input variables.
Re: Disabling Client-Side Commands
Posted: Wed Sep 03, 2008 3:32 pm
by Chaos13
with AllObjects + DynamicLoadObject + SetPropertyStr you can do miracles
