<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Yes, but it is only relevant with http downloading (I'm simlinking
the folder too, but with a good htaccess restrictions, and stricts
permission on the files--only readable by the owner). Is it possible
to use the client to try downloading the cfg through the built-in
protocol ? That could be the major hack, and it can potentially
touch every quake-based game, at least those using the same net
codebase (cod2 is one of them).<br>
<br>
But I'm pretty sure it's not the case, and http is the way to
follow, and to harden...<br>
<br>
Le 13/09/2010 21:09, Sheepa a écrit :
<blockquote cite="mid:B2DF3D6E67B54413959C2160E00A1CDE@MAIN"
type="cite">
<title></title>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
<meta name="GENERATOR" content="MSHTML 8.00.7600.16625">
<div><font face="Arial" size="2">I havnt't really researched this
matter but I'm guessing ppl are creating symlinks to their
entire mods folder? I've symlinked the individual files that
are supposed to be available to the public.</font></div>
<div> </div>
<div style="font: 10pt Tahoma;">
<div><br>
</div>
<div style="background: none repeat scroll 0% 0% rgb(245, 245,
245);">
<div style=""><b>From:</b> <a moz-do-not-send="true"
title="morpheus@clantoc.org"
href="mailto:morpheus@clantoc.org">Morpheus</a> </div>
<div><b>Sent:</b> Monday, September 13, 2010 8:08 PM</div>
<div><b>To:</b> <a moz-do-not-send="true"
title="mailto:cod@icculus.org
Följ länken genom att trycka på CTRL och klicka"
href="mailto:cod@icculus.org">Call of Duty server admin
list.</a> </div>
<div><b>Subject:</b> Re: [cod] Cfg download hacking</div>
</div>
</div>
<div><br>
</div>
How do they try to download it ? How do you allow them to download
files ? how the http redirection is set up (if there is one) ?
Without some details about the setup and the attempts, it's hard
to give you a fix...<br>
<br>
Le 13/09/2010 19:11, Nosjp Nosjp a écrit :
<blockquote
cite="mid:AANLkTi=RJGRC0LOfHDOhuM+XLQqtPfT8KhXvyamXmt6f@mail.gmail.com"
type="cite">The only one solution: set sv_allowDownload "0"<br>
<br>
<div class="gmail_quote">On Mon, Sep 13, 2010 at 7:45 PM, Marco
Padovan <span dir="ltr"><<a
href="mailto:evolutioncrazy@gmail.com"
moz-do-not-send="true">evolutioncrazy@gmail.com</a>></span>
wrote:<br>
<blockquote style="border-left: 1px solid rgb(204, 204, 204);
margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"
class="gmail_quote">
<p>We are having major hack attempts that consist in people
downloading the cfg files.... currently we had to use
random file names... </p>
<p>is there any solid work around? </p>
<br>
_______________________________________________<br>
cod mailing list<br>
<a href="mailto:cod@icculus.org" moz-do-not-send="true">cod@icculus.org</a><br>
<a title="http://icculus.org/mailman/listinfo/cod
Följ länken genom att trycka på CTRL och klicka"
href="http://icculus.org/mailman/listinfo/cod"
target="_blank" moz-do-not-send="true">http://icculus.org/mailman/listinfo/cod</a><br>
<br>
</blockquote>
</div>
<br>
<pre wrap=""><fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
cod mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:cod@icculus.org">cod@icculus.org</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://icculus.org/mailman/listinfo/cod">http://icculus.org/mailman/listinfo/cod</a>
</pre>
</blockquote>
<p>
</p>
<hr>
_______________________________________________<br>
cod mailing list<br>
<a class="moz-txt-link-abbreviated" href="mailto:cod@icculus.org">cod@icculus.org</a><br>
<a class="moz-txt-link-freetext" href="http://icculus.org/mailman/listinfo/cod">http://icculus.org/mailman/listinfo/cod</a><br>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
cod mailing list
<a class="moz-txt-link-abbreviated" href="mailto:cod@icculus.org">cod@icculus.org</a>
<a class="moz-txt-link-freetext" href="http://icculus.org/mailman/listinfo/cod">http://icculus.org/mailman/listinfo/cod</a>
</pre>
</blockquote>
</body>
</html>