Commit Graph

5 Commits

Author SHA1 Message Date
juanjp600
83f8ad0555 Clientside fix for empty password
Thanks for finding this Reg
2016-08-29 18:40:27 -03:00
juanjp600
e284ff5f38 Heavier password encryption
I don't think this fixes actual bugs but the encryption seemed kinda weak.
2016-08-29 07:13:19 -03:00
juanjp600
d909a8d9b6 Filter out Unicode and non-printable ASCII
+ return when authentication fails because of null client
2016-08-28 16:01:23 -03:00
Regalis
712953cc9e WIP client special permissions (kick, ban, end round) 2016-08-24 11:47:46 +03:00
Regalis
ef0098d52a Anti-gamerfood measures:
- clients don't send server passwords as plaintext: the server sends a nonce which the client encrypt using the password as the key
- IPs are visible in netstats
- amount of client jobpreferences limited to 3 at the servers side
- sanitizing client names
2016-08-19 18:18:07 +03:00