[Suicidal]

I feel so dumb :roll:

You solved my issue! Thanks! You're the best... :mrgreen:

[Moustache]

The server log read script works.
But it is just your screenshot script.

If you want I can send it to you Ashus but I don't think you will find it useful.

I have a question.
Is it possible to send the same command to server 1 , 3 and 6 with one click?

[Ashus]

No, and it's not planned in the future. You could modify the script to open action.php with different server ids, but that would be fixed to those three servers.

[Moustache]

K. I will give it a try

I do have another suggestion :oops:

Can you make the security better?
Because I think it is now rather easy to brute force the password because there is no check on the amount of wrong password.
Or am I wrong?

[Ashus]

You should always choose a password long and complex enough to prevent this. Even if I'd write something to block the same IP, there is nothing that would prevent robots to change their IPs by using proxy servers. On the other side, what would prevent people from trying to "brute-force guess" the gameserver's RCON password directly? There is no protection against this as well AFAIK.

[Moustache]

You should always choose a password long and complex enough to prevent this. Even if I'd write something to block the same IP, there is nothing that would prevent robots to change their IPs by using proxy servers. On the other side, what would prevent people from trying to "brute-force guess" the gameserver's RCON password directly? There is no protection against this as well AFAIK.

Maybe a captcha security?
The cod engine does not respond back when you have the right or wrong password. And it is harder to brute force a rcon from a game then to brute force a password from a php script.

[Ashus]

How do you think PHP Rcon works? PHP script sends plaintext UDP packet containing rcon password and command to the gameserver and reads the immediate reply. Anyone could alter PHP Rcon to check for different answer - detect working password.

[Moustache]

How do you think PHP Rcon works? PHP script sends plaintext UDP packet containing rcon password and command to the gameserver and reads the immediate reply. Anyone could alter PHP Rcon to check for different answer - detect working password.

True, but then you need to have some php skills.
And there are enough of brute force tools on the web to attack a site.

[butcher]

Hi Ashus.
Nice tool.

Potreboval by som pomoc.
Chcel by som pridat custom commands na zmenu time alebo score limitu, a to tak ze do okienka by uzivatel dopisal cislo a potvrdil. Teraz mam fixne nastavene na 10 alebo 20 minutove a uzivatel si vyberie.
pls. porad, nie som expert na php
Dakujem

[Ashus]

Cau, pridal jsem ti novou featuru, uz muzes %m lehce pouzit jako u custom_cmds, sosni novou verzi:

http://ashus.ashus.net/viewtopic.php?f=4&t=27&p=27

Code:

$custom_cmd[] = 'Zmenit time limit TDM [min]/scr_tdm_timelimit %m';