Author Topic: Output Event-Server Command  (Read 3229 times)

That's nonsense. If it doesn't call it instantly, it completely defies the point.

Hence the custom exception list and command filtering. There is no other way to release this without it being a security issue, so any possibility is worth considering.

Besides, a command like ban is more suited to have a prompt don't you think?
« Last Edit: January 21, 2014, 01:36:56 PM by General »

Let's just put a rtb pref to make it host only

Wow, this topic turned into a huge discussion.

Wow, this topic turned into a huge discussion.
Well, did you get your event?

Let's just put a rtb pref to make it host only
Or not even have a pref. (Badspot's reason for failing this seemed to be hosts giving people access to it without realizing what it can do. I don't think a warning label would be effective enough so I think it should be host only regardless.)

Badspot

  • Administrator
Even if it was host only it's still a tremendously bad idea because malicious scripts could be embedded in save files. 

Even if it was host only it's still a tremendously bad idea because malicious scripts could be embedded in save files. 
When a brick is loaded, check whether the guy that loaded it has permission to add the event?

Could still be a problem when ownership isn't loaded

That's why you check whether the guy uploading the save has permission?

What Badspot's saying is that I would be able to distribute a malicious save file to other people using this.

"Warning! A brick has an event to call 'ban' with the arguments '0 <var:cl:bl_id> -1 hah'. Apply this event?"

"Yes" "No"

"Warning! A brick has an event to call 'ban' with the arguments '0 <var:cl:bl_id> -1 hah'. Apply this event?"

"Yes" "No"
Eughh, you'd have to check every single brick if it has that event, and it'd have to be within a short time, if a guy loaded a 256k save file, it'd take so long to check every brick that the event would have already activated.