Your assumptions are correct. The client needs access to the ftp (and  
all of our clients have this acces, as well as all of our competitor's  
clients) to be able to change anything he wants, such as server name,  
password, etc ... this is how it's been for the past 2 years and we've  
never had this problem before.

I asked him how he manages to this and I'm waiting on an answer, but I  
assume that I won't get it. I can always shut down his account but my  
concern is if he can do it, then everyone can.

PS: my other solution is to give acces to only a couple of parameters  
in the server.cfg via my game panel, which brings me to another  
question that will be the subject of another email: is there a  
freelancer out there that can build us a new gamepanel (php, mysql of  
course), I'm also going to put an RFP up on the major dev sites.

Thanks all for your input.



Le 4 août 09 à 17:29, David A. Parker a écrit :

> Let me make a few assumptions here.  I assume that:
>
> 1. You have a box and the "client" in question pays for a CS 1.6  
> server
> with N slots which runs on this box.
>
> 2. You don't want him to change the number of slots because he only  
> pays
> for N slots.
>
> Is this the case?  If so, then my solution to the problem would be to
> tell him that he either explains to you in detail exactly what he is
> doing and how he is doing it, or you cancel his service and revoke his
> access to the box.
>
> If my assumptions are incorrect then I must be misunderstanding all of
> this, since I can't think of any other reason he would have access to
> the server.cfg but you wouldn't want him changing the slot count.
>
> Arnaud DUMAS de RAULY wrote:
>> Yes he can upload different server.cfg
>>
>> The server is launched by command line, the command-line overrides  
>> the
>> setting in the server.cfg doesn't it, unless maybe the "autoupdate"
>> feature enables a reboot ignoring the commandline (which seems
>> impossible though) ?
>> I've been hosting servers for the past year and a half like that, I
>> would have known earlier if a simple "maxplayers 24" line in the
>> server.cfg changed anything .... I hope ...
>>
>> Thanks for your input.
>>
>> Le 4 août 09 à 17:08, David A. Parker a écrit :
>>
>>> When you say "he has ftp access" does that mean he can upload a
>>> server.cfg file to the directory where you have CS installed?  If
>>> that's
>>> the case, I would guess he's uploading a custom server.cfg and it  
>>> gets
>>> read on map change.  Just a guess, though.
>>>
>>>    - Dave
>>>
>>> Arnaud DUMAS de RAULY wrote:
>>>> Thanks guys for your answers, but here a couple more details:
>>>> - the command script is protected
>>>> - the guy says he does it using the server.cfg
>>>> - gameservers are launched as a user and not as root
>>>> - he has ftp access
>>>> - the bins and .so are not protected
>>>>
>>>> Thanks for your time.
>>>>
>>>> Le 4 août 09 à 16:59, Ronny Schedel a écrit :
>>>>
>>>>> Protect your start scripts.
>>>>>
>>>>>> Hi everyone,
>>>>>> I just found out one of my clients can change the slot count of  
>>>>>> his
>>>>>> server (CS 1.6), does anyone know how ou know how to stop him  
>>>>>> from
>>>>>> doing so ? Is there a common way of doing it and most  
>>>>>> important, is
>>>>>> there a fix ?
>>>>>>
>>>>>> I think he uses the server.cfg to send commands through to the
>>>>>> server.
>>>>>>
>>>>>> Thanks all for your help
>>>>>>
>>>>>>
>>>>>> _______________________________________________
>>>>>> To unsubscribe, edit your list preferences, or view the list
>>>>>> archives,
>>>>>> please visit:
>>>>>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>>>>>>
>>>>> _______________________________________________
>>>>> To unsubscribe, edit your list preferences, or view the list
>>>>> archives, please visit:
>>>>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>>>>
>>>> _______________________________________________
>>>> To unsubscribe, edit your list preferences, or view the list
>>>> archives, please visit:
>>>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>>>>
>>> -- 
>>>
>>> Dave Parker
>>> Utica College
>>> Integrated Information Technology Services
>>> (315) 792-3229
>>> Registered Linux User #408177
>>>
>>>
>>> _______________________________________________
>>> To unsubscribe, edit your list preferences, or view the list
>>> archives, please visit:
>>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>>
>>
>> _______________________________________________
>> To unsubscribe, edit your list preferences, or view the list  
>> archives, please visit:
>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>>
>
> -- 
>
> Dave Parker
> Utica College
> Integrated Information Technology Services
> (315) 792-3229
> Registered Linux User #408177
>
>
> _______________________________________________
> To unsubscribe, edit your list preferences, or view the list  
> archives, please visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds_linux


_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

Reply via email to