Security Leak

[SaLeM]

Hi. I set my commands.xml not to let GMs ban. But this is useless if they can just right-click on players and ban/delete/kick them.

Is there any way to disable that option?

Ty

 

[Mokerhamer]

Change the amounf of flags in the sql file

 

[SaLeM]

What flag must I check?

Privileges
Can not be attacked
Can convince all monsters
Can summon all monsters
Can illusion all monsters
Can sense invisibility
Ignored by monsters
Do not gain infight
Has unlimited mana
Has unlimited soul
Do no gain exhaustion
Can always login
Can broadcast
Can edit all house rights
Can not be banned
Can not be pushed
Has unlimited capacity
Can push all creatures
Talk red in private
Talk red in channel
Talk orange in help-channel
Skip spell usage checks
Skip weapon usage checks
Gain max speed
Cannot be added to VIP
Talk red anonymously
Ignore protection-zone
Can not be muted
Permanent premium account

Limitations
Can not use combat
Can not attack players
Can not attack monsters
Cannot use spells
Cannot pickup items
Do not gain experience
Do not gain mana
Do not gain health
Do not gain skill
Can not gain loot


It doesn't say anything about banning players. :S

 

[Jester]

I just notice it lol
Try to set x access to ban commands and set less to those Gm you don't want to be able to ban players.

 

[zniC]

I just notice it lol
Try to set x access to ban commands and set less to those Gm you don't want to be able to ban players.

AND that's just what he did...

 

[SaLeM]

I just notice it lol
Try to set x access to ban commands and set less to those Gm you don't want to be able to ban players.

Their access is 1. If I give them access 0, then they won't look as "You see a gamemaster", but "You see a sorcerer".

 

[Mark]

The Ctrl + Y system is based on their account type.

 

[SaLeM]

Thanks God. xD. My tutors had account type 2 haha. If they had known, many bans would have been. xD. Now they and my GMs are accType 1 and all is working fine.

Thanks