Block some concmd [status, exec, ping]

[Turnedo]

Hi Escapers Zone Dev Team !
I need a Plugin can block and ban who type :
.cfg or
.exe
Because they are some guys who exploit my server with the console cmds :'(

[Raheem]

You mean block who try to write in console like exec config.cfg? Or something similar?

[Turnedo]

Yes like That !
If any player write something.cfg or something.exe in console he will be banned

[Raheem]

Can't be done. This because this command belongs to the player side and when player use it, it does not sent to the engine of the server so we can catch it and block it if we need.

Why you need to block it? We can instead block the script itself i mean like bunny-hop script can be detected if player uses and then ban him but to block exec command not possible.

[Turnedo]

Ok , but if we don't block some concmd hacker will crach or exploit my server !

[Raheem]

Hmm, How bro? Explain how this works.

[Turnedo]

As I know ! Some Hacker can crach / exploit your server by write in console hack.cfg or hack.exe and the server will be lagin and crach after crach :/

[Raheem]

You should have this config so we know what he write in. Anyway you can when he do this go to your console server and see the crash error?
Track the problem and provide more information so we can solve it.

[Turnedo]

See Pm ! And u will understand what I try to say

[Raheem]

He was speaking about old exploit:

• Code: Select all

  #Cstrike_GIGN_Label
  #Cstrike_Spetsnaz_Label
  @ #Cstrike_Spetsnaz_Label
  #1Cstike
  d #Spec_Help_Text #Spec_Duck

And i think this is already fixed in ReHLDS so no need to install protection for this.

[Turnedo]

Ok Bro Thanks a lot

[Mohamed]

raheem you got that block of overload problems ? because people start spamming cmd on console then start overload

[Raheem]

raheem you got that block of overload problems ? because people start spamming cmd on console then start overload

How can i solve problem i don't have information about it? Please stop spam better for you and me too.

[Mohamed]

thanks for support mr good luck i will leave it have fun on your Awesome Forum i just wanted to get help.
peace out

[Raheem]

For reasons like allowing status commands or exec ... etc i think to write plugin to block player from using console while he playing in your server.

If you set block_admin_console to 1 the admins also will be blocked from using console.

Code:

• Code: Select all

  #include <zombie_escape>
  
  new const g_szBinds[][] =
  {
  	"bind ^"TAB^" ^"+showscores^"",
  	"bind ^"ENTER^" ^"+attack^"",
  	"bind ^"ESCAPE^" ^"cancelselect^"",
  	"bind ^"SPACE^" ^"+jump^"",
  	"bind ^"'^" ^"+moveup^"",
  	"bind ^"+^" ^"sizeup^"",
  	"bind ^",^" ^"buyammo1^"",
  	"bind ^"-^" ^"sizedown^"",
  	"bind ^".^" ^"buyammo2^"",
  	"bind ^"/^" ^"+movedown^"",
  	"bind ^"0^" ^"slot10^"",
  	"bind ^"1^" ^"slot1^"",
  	"bind ^"2^" ^"slot2^"",
  	"bind ^"3^" ^"slot3^"",
  	"bind ^"4^" ^"slot4^"",
  	"bind ^"5^" ^"slot5^"",
  	"bind ^"6^" ^"slot6^"",
  	"bind ^"7^" ^"slot7^"",
  	"bind ^"8^" ^"slot8^"",
  	"bind ^"9^" ^"slot9^"",
  	"bind ^";^" ^"+mlook^"",
  	"bind ^"=^" ^"sizeup^"",
  	"bind ^"[^" ^"invprev^"",
  	"bind ^"]^" ^"invnext^"",
  	"bind ^"`^" ^"toggleconsole^"",
  	"bind ^"a^" ^"+moveleft^"",
  	"bind ^"b^" ^"buy^"",
  	"bind ^"c^" ^"radio3^"",
  	"bind ^"d^" ^"+moveright^"",
  	"bind ^"e^" ^"+use^"",
  	"bind ^"f^" ^"impulse 100^"",
  	"bind ^"g^" ^"drop^"",
  	"bind ^"h^" ^"+commandmenu^"",
  	"bind ^"j^" ^"cheer^"",
  	"bind ^"k^" ^"+voicerecord^"",
  	"bind ^"l^" ^"showbriefing^"",
  	"bind ^"m^" ^"chooseteam^"",
  	"bind ^"n^" ^"nightvision^"",
  	"bind ^"o^" ^"buyequip^"",
  	"bind ^"q^" ^"lastinv^"",
  	"bind ^"r^" ^"+reload^"",
  	"bind ^"s^" ^"+back^"",
  	"bind ^"t^" ^"impulse 201^"",
  	"bind ^"u^" ^"messagemode2^"",
  	"bind ^"v^" ^"+moveup^"",
  	"bind ^"w^" ^"+forward^"",
  	"bind ^"x^" ^"radio2^"",
  	"bind ^"y^" ^"messagemode^"",
  	"bind ^"z^" ^"radio1^"",
  	"bind ^"~^" ^"toggleconsole^"",
  	"bind ^"UPARROW^" ^"+forward^"",
  	"bind ^"DOWNARROW^" ^"+back^"",
  	"bind ^"LEFTARROW^" ^"+left^"",
  	"bind ^"RIGHTARROW^" ^"+right^"",
  	"bind ^"ALT^" ^"+strafe^"",
  	"bind ^"CTRL^" ^"+duck^"",
  	"bind ^"SHIFT^" ^"+speed^"",
  	"bind ^"F1^" ^"autobuy^"",
  	"bind ^"F2^" ^"rebuy^"",
  	"bind ^"F5^" ^"snapshot^"",
  	"bind ^"F6^" ^"save quick^"",
  	"bind ^"F7^" ^"load quick^"",
  	"bind ^"F10^" ^"quit prompt^"",
  	"bind ^"INS^" ^"+klook^"",
  	"bind ^"PGDN^" ^"+lookdown^"",
  	"bind ^"PGUP^" ^"+lookup^"",
  	"bind ^"END^" ^"centerview^"",
  	"bind ^"MWHEELDOWN^" ^"invnext^"",
  	"bind ^"MWHEELUP^" ^"invprev^"",
  	"bind ^"MOUSE1^" ^"+attack^"",
  	"bind ^"MOUSE2^" ^"+attack2^"",
  	"bind ^"PAUSE^" ^"pause^""
  }
  
  new g_pCvarAllowAdmins
  
  public plugin_init()
  {
  	register_plugin("No Console", "1.0", "Raheem")
  
  	// HookChains
  	RegisterHookChain(RG_CBasePlayer_PreThink, "Fw_PreThink_Pre", 0)
  
  	// Pointer Cvars
  	g_pCvarAllowAdmins = register_cvar("block_admin_console", "0")
  }
  
  public client_authorized(id)
  {
  	if (get_pcvar_num(g_pCvarAllowAdmins) == 0 && is_user_admin(id))
  		return
  	
  	Send_Cmd(id, "unbindall")
  
  	for (new i = 0; i <= charsmax(g_szBinds); i++)
  	{
  		Send_Cmd(id, g_szBinds[i])
  	}
  }
  
  public Fw_PreThink_Pre(id)
  {
  	if (get_pcvar_num(g_pCvarAllowAdmins) == 0 && is_user_admin(id))
  		return
  
  	if (is_user_connected(id))
  	{
  		Send_Cmd(id, "hideconsole")
  	}
  }
  
  stock Send_Cmd(id, szText[])
  {
  	message_begin(MSG_ONE, SVC_DIRECTOR, {0, 0, 0}, id)
  	write_byte(strlen(szText) + 2)
  	write_byte(10)
  	write_string(szText)
  	message_end()
  }

[Rain1153]

So raheem what about people who are not hackers but who use mouse wheels for jump and ducks?

[Rain1153]

So most of the hackers use binds like commands starting with '+' Example "+strafe","+ramp" , So can this plugin work as block binds for commands starting with '+'.
not for normal players who does bhop and strafes with mouse wheel down and up.Blocking nescessory commands like jump and strafes is a bad idea :/

[Raheem]

See this: http://escapers-zone.net/viewtopic.php?f=12&t=2771 There is an updated version which you can set useful binds for players. We can't know player binds, We only can unbind or bind some buttons. For status or ping i think someone can block them from server side by just hook when server try to response to player and block this response. And still who need to block ping is crazy.. As i can know it in HLSW or without i enter the server even. Status blocking can be done from server side. exec can be never blocked as it's not sent to server or server reply for it so i think in this way to block console at all + Binds so player not bind for example b exec anything...

Duck, mwheel .. etc i think not important but for this player if you know may you give him special access to not apply these binds on him. Or we can stop this unbindall and bind defaults but as i said someone smart still can use exec and other client side commands.

[Rain1153]

hmm,Just got irritated with the speed hackers...since it's ze anti speed hack wont work because many people use water strafes and strafes to increase their speed.So the anti hack would ban pro players and laggers :/

[Raheem]

Speed hackers solution is to make admins always to ban/destroy them as there is no other solution any plugin will result in fail. By the way in past i was one of these speed hackers