[Tool] AdminServ 2.1.0

[Force92]

I have fixed the Problem, i have changed back the line to False and added the other Servers to the servers.cfg.php

[Qual]

Hello, ovh has disabled my host. :

Problème rencontré : Backdoor
Commande apparente : php.ORIG.5_3 -c /usr/local/lib/php.ini-2 -d register_globals=1 -d magic_quotes_gpc=1 -d session.use_trans_sid=1 -d memcached_pass= -d ovh=best get_current_serverinfo.php
Exécutable utilisé : /usr/local/bin/php.ORIG.5.3.16
Horodatage: Thu Apr 4 19:51:15 CEST 2013

Maybe your listen script use too much cpu ? Or send too much request ?

[TheM]

Hello, ovh has disabled my host. :

Problème rencontré : Backdoor
Commande apparente : php.ORIG.5_3 -c /usr/local/lib/php.ini-2 -d register_globals=1 -d magic_quotes_gpc=1 -d session.use_trans_sid=1 -d memcached_pass= -d ovh=best get_current_serverinfo.php
Exécutable utilisé : /usr/local/bin/php.ORIG.5.3.16
Horodatage: Thu Apr 4 19:51:15 CEST 2013

Maybe your listen script use too much cpu ? Or send too much request ?

If you read the "error" properly, you'll find out that it sees "get_current_serverinfo.php" as an backdoor.

[weerwolf]

In that file, get_current_serverinfo.php, you can set the user password, which you have given to the maniaplanet server. This acount is the lowest level of acces to the dedicated, and used, also here, to get some basic serverinfo like players and active map.

2 cases:
if you run adminserv at the same computer as your dedicated, you most likely have set <xmlrpc_allowremote>False</xmlrpc_allowremote> in the config of the dedicated.
This way it isnt a backdoor bacause only local connections are accepted, and adminserv can still get the info.

If you run adminserv at an other computer as your dedicated, you have had to set <xmlrpc_allowremote>True</xmlrpc_allowremote> in the config file of the dedicated.
This means that external connections are allowed, and thus can be used as an backdoor.

WW

[fng_thatoneguy]

If you run adminserv at an other computer as your dedicated, you have had to set <xmlrpc_allowremote>True</xmlrpc_allowremote> in the config file of the dedicated.
This means that external connections are allowed, and thus can be used as an backdoor.

You can also set an IP address:
<xmlrpc_allowremote>###.###.###.###</xmlrpc_allowremote>

to allow an external computer but still keep it more secure.

[weerwolf]

Right, forgot to mention that one
tnx fng_thatoneguy

[fng_thatoneguy]

You're welcome!

[weerwolf]

Added basepaths to the server configfile are deleted when changes are made through the webbrowser.

[hackie]

Running this with TMUF server.

Under section " Game Infos" between general and time attack I'm getting error :


Notice: Undefined index: ScriptName in C:\xampp\htdocs\adminserv\includes\pages\gameinfos.php on line 84


When I want to save match setting ( on that window , section Game infos ) it says :

[-1000] invalid file name.

Btw , does it matter what server controller I use. ( xaseco or fast ..... )

[skydel0]

Hi i have a litle problem my error :

Code: Select all

Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at /var/www/mania/includes/lang/de.php:1) in /var/www/mania/config/index.php on line 98

Warning: Cannot modify header information - headers already sent by (output started at /var/www/mania/includes/lang/de.php:1) in /var/www/mania/includes/class/utils.class.php on line 31

Does anyone know whats wrong?