Disabling Client-Side Commands

[HeadShot]

I need something to disable commands done client-side, if anyone has a pre-made mod or something. It'd be great if it was one where I could choose the commands to disable btw. Thanks.

[Smirftsch]

227 disables already some of the potential harmful commands. I don't think you will find a mod which is able to select the commands you want to disallow, some of the commands can't be simply disabled at all like this (well, in theory it MAY be possible, but this would require very heavy changes and hacks).
Which commands do you want to disable?

[HeadShot]

227 disables already some of the potential harmful commands. I don't think you will find a mod which is able to select the commands you want to disallow, some of the commands can't be simply disabled at all like this (well, in theory it MAY be possible, but this would require very heavy changes and hacks).
Which commands do you want to disable?

Completely forgot about my post here.

I wanted to get rid of the texture btranslucent true, the playerpawn lightbrightness/radius/type and etc. These can be used to have a unfair advantage in INF SO

[Jâçkrâßßit]

A client should be able to pick what music they want to play online regardless. I know this has no relevance to the above post, but as part of this topic, this is the right place to put this message

[Smartball]

227 disables already some of the potential harmful commands. I don't think you will find a mod which is able to select the commands you want to disallow, some of the commands can't be simply disabled at all like this (well, in theory it MAY be possible, but this would require very heavy changes and hacks).
Which commands do you want to disable?

Completely forgot about my post here.

I wanted to get rid of the texture btranslucent true, the playerpawn lightbrightness/radius/type and etc. These can be used to have a unfair advantage in INF SO

I believe this sort of stuff has been dealt with in 227. There is no mod that can do it effectively pre-227 due to the use of .txt files, and AFAIK the only mod that even makes an attempt to stop it is my own EDM. I don't think you're going to find anything that can do this as an add-on to pre-227 SO unless someone wrote a very hackish mod that repeatedly checked with timers, which still IMO is not sufficient.

[[]KAOS[]Casey]

Set-anything commands don't work unless the next word is "input" online in 227


there is a workaround for this, but if you have a console-check or anticheat for bad consoles, then it should be damn-near impossible

[Chaos13]

Set Texture bTranslucent True will not work even if client will succeed doing it: cause of replication and bsp cutting. Last time i checked (7m ago) it looked like shit.

By the way iirc EDM does not stop Set commands completely due to a bug i found, but i am not telling here

[GreatEmerald]

Jackrabbit is being ignored But actually, I really think that the UT2004 music system is the best way of doing that - don't upload music from server as not everyone likes it, and it's additional large download that is useless anyway. And then also there's the Music Player inside that you can use to play music from other OGGs easily. Anything like that can be done here?

[Smartball]

By the way iirc EDM does not stop Set commands completely due to a bug i found, but i am not telling here

There is no mod that can do it effectively pre-227.

AFAIK the only mod that even makes an attempt to stop it is my own EDM.

And just for the record, I was referencing the idea of putting commands in .txt files - not necessarily using the console set command. I'm aware of other mods that attempt to make the set command 'friendly' but I'm not aware of any mods that attempt to check for changed properties through the use of .txt files other than EDM. Even at that (as I stated) it is not done to my own satisfaction because it cannot be done sufficiently pre-227.

[Bane]

How about in a subclass of playerpawn,

Code: Select all

exec function set(string s);

I put that in Hide and Seek and IIRC it blocked regular typing, execs, and commands typed in the console

[Chaos13]

How about
Level.ConsoleCommand("Set shit")? xD
or simple nametable shift

[Smartball]

How about in a subclass of playerpawn,

Code: Select all

exec function set(string s);

I put that in Hide and Seek and IIRC it blocked regular typing, execs, and commands typed in the console

I think you're missing the point. I can also re-declare the "exec" console command to stop people from using .txt files, but that doesn't solve the problem. Set shouldn't be disabled, and neither should exec. But at the same time, so-called 'malicious' commands that can be executed with set and exec should be blocked, and therein lies the problem that exceeds UScript's capabilities. Leaving the commands in and checking stuff on the client is useless since that can be bypassed, which leaves it up to the server to perform the checks. And the server can't check effectively through UScript unless it's frequently requesting the values of whatever properties on the client are deemed "malicious," but this is not a foolproof system by any means either.

Basically the argument that I'm making is that these checks cannot be performed "sufficiently" pre-227, with my definition of "sufficient" being without additional lag, without any loss of non-malicious functionality, and with it being nearly impossible for someone to side-step the checks.

[Chaos13]

You can always sidestep any non-native checks with useful ucc command. Moreover it is possible to successfully sidestep NATIVE (!!!) checks by compiling own dll (UTDC anyone?)

Thats simply in theory, i have not tried yet cause i have more important tasks in my TODO list.

[.:..:]

Set-anything commands don't work unless the next word is "input" online in 227

Set-anything only works with config variables on 227 online games and not only input variables.

[Chaos13]

with AllObjects + DynamicLoadObject + SetPropertyStr you can do miracles