Earlier tonight had a player hacking around on my server. Within sof their connection I found this error in logs.
[quote]L 02/10/2014 - 21:13:46: Lua Error:
[ERROR] 1: ')' expected near 'sv_loadingurl'
1. unknown - [C]:0
[/quote]
I don't know enough to understand how they were able to gain access on my server, but I believe it starts here.
[quote]
L 02/10/2014 - 21:04:39: "RiriPewchu<16><STEAM_0:0:81038991><>" connected, address "74.115.3.64:27005"
L 02/10/2014 - 21:04:39: "RiriPewchu<16><STEAM_0:0:81038991><>" STEAM USERID validated
L 02/10/2014 - 21:05:05: "RiriPewchu<16><STEAM_0:0:81038991><>" entered the game
L 02/10/2014 - 21:05:05: [ULX] (SILENT) RiriPewchu ID: STEAM_0:1:38717786
L 02/10/2014 - 21:05:05: "RiriPewchu<16><STEAM_0:0:81038991><>" disconnected (reason "The account that lent you Garry's Mod is banned on this server")
L 02/10/2014 - 21:13:21: "BOT Frank<23><STEAM_0:0:78613850><>" disconnected (reason "Disconnect by user.")
L 02/10/2014 - 21:13:21: "BOT Frank<25><STEAM_0:0:78613850><>" connected, address "74.115.3.64:27005"
L 02/10/2014 - 21:13:22: "BOT Frank<25><STEAM_0:0:78613850><>" STEAM USERID validated
L 02/10/2014 - 21:13:27: "BOT Frank<25><STEAM_0:0:78613850><>" entered the game
L 02/10/2014 - 21:13:46: Lua Error:
[ERROR] 1: ')' expected near 'sv_loadingurl'
1. unknown - [C]:0
[/quote]
What's the issue besides the lua error?
Well the player was able to do anything as if he were console. This is the only trace of an error that I could find, other than that he had full control. I've also never had this error appear before. The last line there was my main concern
[quote]1. unknown - [C]:0[/quote]
Disable RCON and sv_allowupload commands.
[CODE]
rcon_password "" // This disables RCON completely.
sv_allowupload 0 // Enabling this will open up for some serious exploits to gain RCON password and more, so keep it disabled.
[/CODE]
Yeah I have those set to 0 and rcon disabled.
Is this possible?
[img]http://puu.sh/6SIgm.png[/img]
Sorry, you need to Log In to post a reply to this thread.