Page 1 of 1
[0.14.7] [Martin] Unable to kick players with exploitish crafted name
Posted: Sun Sep 18, 2016 5:43 pm
by JY-
If a griefer join with a name beginning with many spaces at the beginning or in the middle, overly long, or other hard to type characters, it's nearly impossible to kick him.
Furthermore, in the specific case I saw, the console chat only displayed "." as character name in kill message when character name was many spaces, then a dot.
Possible solutions :
* More strict checking on names (alphanumeric + a few chars, no more than one consecutive space, size limit)
* kick/ban/admin GUI not requiring to type the exact, case sensitive name.
Then the usual suggestions :
* Ability to ban by IP
* votekick/report buttons
* Use of wildcards to kick/ban
Re: [0.14.7] Unable to kick players with exploitish crafted name
Posted: Sun Sep 18, 2016 5:49 pm
by Rseding91
Do you have user authentication disabled on your server? In order to connect to an authenticated game players have to have their username set to their login name which can't have the characters you're describing.
Re: [0.14.7] Unable to kick players with exploitish crafted name
Posted: Sun Sep 18, 2016 6:31 pm
by kovarex
Rseding91 wrote:Do you have user authentication disabled on your server? In order to connect to an authenticated game players have to have their username set to their login name which can't have the characters you're describing.
Yes, but we should deifnitely limit the character in the username, spaces shouldn't be allowed for sure.
Re: [0.14.7] Unable to kick players with exploitish crafted name
Posted: Sun Sep 18, 2016 6:33 pm
by Rseding91
kovarex wrote:Rseding91 wrote:Do you have user authentication disabled on your server? In order to connect to an authenticated game players have to have their username set to their login name which can't have the characters you're describing.
Yes, but we should deifnitely limit the character in the username, spaces shouldn't be allowed for sure.
Right

Just trying to establish cause first.
Re: [0.14.7] Unable to kick players with exploitish crafted name
Posted: Sun Sep 18, 2016 7:47 pm
by Adil
Why don't just add the ability to ban by player_index? (And list it with some command somewhere)
Re: [0.14.7] [Martin] Unable to kick players with exploitish crafted name
Posted: Mon Sep 19, 2016 6:35 pm
by JY-
The server I saw probably did not have auth on. Might consider making auth on by default when creating new MP public game too
Re: [0.14.7] [Martin] Unable to kick players with exploitish crafted name
Posted: Thu Sep 29, 2016 1:03 pm
by HanziQ
Usernames should be now limited to numbers, letters and -_. characters