13-09-2013, 04:50 PM
Before you start reading, please note that I have little understanding of how ET server systems work and how ET server hacking works. I do not know if this is possible anyways.
From what I've seen, general server hackers either gain rcon access or gain direct FTP access and edit admin database files. My proposal would be to host the actual admin database on a remote server, maybe a home hosted one. This way the hacker would be in the unknown of the database server address unless it is made public, which it shouldn't be. Then, at the start of every map, the server would load a copy of the database to work with. All changes made to this via RCON will then be recorded, and at the end of the map, or when the changes are issued, the server would authenticate the user by IP/GUID etc. (As ligs plugin works for commands). If it is authenticated then the updated database should replace the database on the remote server and the new database used for the next map and so on and so forth.
This would provide detailed information of when and if a hacker decides to change stuff and also be able to keep a regularly updated database.
Again, I have poor knowledge how ET works, so none of this might make sense.
From what I've seen, general server hackers either gain rcon access or gain direct FTP access and edit admin database files. My proposal would be to host the actual admin database on a remote server, maybe a home hosted one. This way the hacker would be in the unknown of the database server address unless it is made public, which it shouldn't be. Then, at the start of every map, the server would load a copy of the database to work with. All changes made to this via RCON will then be recorded, and at the end of the map, or when the changes are issued, the server would authenticate the user by IP/GUID etc. (As ligs plugin works for commands). If it is authenticated then the updated database should replace the database on the remote server and the new database used for the next map and so on and so forth.
This would provide detailed information of when and if a hacker decides to change stuff and also be able to keep a regularly updated database.
Again, I have poor knowledge how ET works, so none of this might make sense.
≡≡≡
dycesm.deviantart.com
≡≡≡




Join us on our TWC Discord channel

