Even tough CreateVehicleLocal should be only noticeable on client that executes it its Not. After effects (explosion) of an object is still Global. Making any hacker easily wipe a server without ANY logs. There is also fairly known way to bypass Script.txt that Im sure you are aware of.
Description
Description
Details
Details
- Legacy ID
- 1019699934
- Severity
- None
- Resolution
- Open
- Reproducibility
- Always
- Category
- Multiplayer
Steps To Reproduce
Simply execute this on any client connected to a server:
// 4000 letters of nothing here.
{
"Bomb_03_F" createVehicleLocal (getPos _x);
} forEach allUnits;
Any bomb would work.
Additional Information
Fix? : Make CreateVehicleLocal filters by CreateVehicle filter?
Event Timeline
Comment Actions
So what can we do to protect server from this?
Using https://community.bistudio.com/wiki/CfgDisabledCommands will make flares, smoke, flash not working