is there anyway to fix offline connection to server exploit?

ganja_gaming · **Author**

so recently, I've had a couple players who are banned, but can log back in even with their ip or steam id being banned, for the first 40 seconds. so they can continue their spamming.

it didn't took me long to find how to run the exploit. here's the post

http://www.ownedcore.com/forums/fps/...ence-more.html

please help! thanks!

Sreaper · *Last edited by Sreaper; 02-27-2014 at 16:23.*

Thanks for sharing that exploit with everyone. You can probably expect more where those people came from.

To answer your question, you can probably have someone write you a plugin that kicks players without steam id's.

Pelipoika

"You will get booted on any server every 40 seconds or so, therefore I recommend anyone who uses this exploit to type in "bind f retry" in console, without the " "." 5/5 would exploit again

VoiDeD · *Last edited by VoiDeD; 02-27-2014 at 19:43.*

Sounds like you have SM's core config setting for Steam auth validation enabled, you could temporarily disable it and solve the problem that way.

The ideal solution is to make use of better ban plugins that don't wait for Steam auth when checking SteamIDs.

Ade

pfff has any1 opened a ticked on github for this?

Bacardi

There is already more better method to evade bans, and it's new feature added on Steam lately...
They can now just make new Steam account/new steamid to carry on using same game.

Ade

http://steamcommunity.com/groups/fam...4412076257902/

ganja_gaming · *Last edited by ganja_gaming; 02-28-2014 at 11:58.*

Update: I am currently using KyleS steam works to block family sharing. (aka fixing the exploit)

VoiDeD

Quote:

Originally Posted by ganja_gaming

Update: I am currently using KyleS steam works to block family sharing. (aka fixing the exploit)

Family sharing and the exploit you originally posted are two entirely separate things.

ganja_gaming

oh ok, didn't know that. thanks. I was wondering why it wasn't working haha. i used tony's **** (the thing we not suppose to say on here anymore which is gay as hell) to kick players with no auth within 10 seconds of being connected. so yeah, i guess that'll be the temporary fix to that.