I've seen on the forums in posts by some users that the developer of a addon should secure his net messages.
How would I go about securing my net messages, I've looked around yet I'm unable to even find anything on it (Googled it) I looked at the wiki to
I even checked out the net tutorials just to see if that mentioned anything.
However I was unable to find anything so If someone could shed some light on this that would be great.
Check the data being sent is reasonable.
Let's say you have a net message where the client sends a number to the server. The player has that number of money taken away. If they send a negative number, then it subtracts a negative number giving the player money.
If you had made sure that the number is reasonable (absolute value the number or something) then the exploit wouldn't exist.
Don't assume just because sv_allowcslua is 0 means that only making values seem reasonable on the client can help.
-snip chessnut's post is better-
What Chessnut said really. Serverside validation of all net messages.
Ok, thanks for the information.
Sorry, you need to Log In to post a reply to this thread.
