Wolffiles Lua Script Collection

File content:

--[[
globalcombined lua fixes
last updated 26/jan/2014
 
Notice: Add "set b_gameformat 6" to your server.cfg or config to restrict sniper rifle to 1 per team.
 
-- changelog: 
-- global ban table
-- ip name/chat blocker for public servers
-- duplicate name/guid kick
-- typo fix on /ref and /rcon
-- fixed an exploit with team command
-- contains some fixes by Perlo_0ung?!
-- implented b_gameformat check
-- removed obsolete/unused stuff
-- based on combinedfixes.lua
-- first release
-- all original work copyright -> reyalp@gmail.com
 
--]]
 
modname = "globalcombined"
version = "4"
 
 
global_ban_table = {}
counter = {}
 
function et_InitGame(levelTime,randomSeed,restart)
	et.RegisterModname(""..modname.."   "..version.."   "..et.FindSelf())
	gameformat = tonumber(et.trap_Cvar_Get( "b_gameformat" ))
	maxclients = tonumber( et.trap_Cvar_Get( "sv_maxclients" ) )
	serverpassword = tonumber( et.trap_Cvar_Get( "g_password" ) )
	sniperaxis = 0
	sniperallies = 0
 
	if gameformat == nil then
		et.trap_Cvar_Set( "b_gameformat", "0" )
	end
 
	for cno=0, (maxclients-1) do
		counter[cno] = 0
		local guid = string.upper(et.Info_ValueForKey(et.trap_GetUserinfo(cno), "cl_guid"))
		global_ban_table[guid] = false
	end
 
end
 
-- client command checks, formerly wsfix
-- prevent ws overrun exploit, crlf abuse
-- history: 
--  2 - bugfix
-- TY McSteve for reporting this to us.
 
function et_ClientCommand(cno,cmd)
	local cmd = string.lower(cmd)
	local arg1 = string.lower(et.trap_Argv(1)) 
	local byte = string.byte(arg1,1)
 
	if (cmd == "say" or cmd == "say_team" or cmd == "say_buddy" or cmd == "say_teamnl") and serverpassword == "" then
		if string.find(et.trap_Argv(1), "^(%d+).(%d+).(%d+).(%d+)") or string.find(et.trap_Argv(1), "^.(%w+):(%d+)") then
			return 1 -- abort message
		end
	end
 
	if string.find(arg1, "^7ref") or string.find(arg1, "^7rcon") then
		et.trap_SendServerCommand( cno, "print \"Ckeck your typing: '"..arg1.."'\n\"" )
		return 1
	end
 
	if cmd == "team" or cmd == "nextteam" then --exploit fix team command
		if string.len(arg1) > 1 then
			et.trap_SendServerCommand( cno , "print \"Invalid team join command.\n\"" )
			return 1
		end
        if arg1 ~= "" and byte ~= 98 and byte ~= 114 and byte ~= 115 then 
			et.trap_SendServerCommand( cno , "print \"Invalid team join command.\n\"" )
			return 1
		end
	end
 
if cmd == "forcetapout" then --forcetapout bugfix
	if et.gentity_get(cno, "r.contents") == 0 then  --contents 0 =nobody
	 return 1 --prevent it
	end
end
 
if cmd == "b_gameformat" then
	et.trap_SendServerCommand( cno,"print \"^wb_gameformat is: "..gameformat.."  default: 0\n\"")
	return 1
end
 
 
if gameformat ~= "6" then -- gameformat check
 
if cmd == "class" then
   if et.trap_Argv(1) == "c" then
	if et.trap_Argv(2) == "3" then
	   for j = 0, (maxclients - 1) do
	if getTeam(j) == 2 and getWeapon(j) == 41 then
		sniperallies = sniperallies +1
			end
		end
		if getWeapon(cno) == 41 then
			 sniperallies = sniperallies -1
			end
		if sniperallies > 0 then
			sniperallies = 0
			setPlayerWeapon(cno , 10)  -- Set Weapon to Sten
			return 1
		 end
	for j = 0, (maxclients - 1) do
	if getTeam(j) == 1 and getWeapon(j) == 32 then
		sniperaxis = sniperaxis +1
			end
		end
		if getWeapon(cno) == 32 then
			 sniperaxis = sniperaxis -1
			end
		if sniperaxis > 0 then
			sniperaxis = 0
			setPlayerWeapon(cno , 10)  -- Set Weapon to Sten
			return 1
		 end
	      end
	    end
	 end
 
if cmd == "team" then
   if et.trap_Argv(1) == "b" then
	if et.trap_Argv(2) == "4" then
	  if et.trap_Argv(3) == "25" then
	   for j = 0, (maxclients - 1) do
		if getTeam(j) == 2 and getWeapon(j) == 25 then
		sniperallies = sniperallies +1
			end
		end
		if getWeapon(cno) == 25 then
			 sniperallies = sniperallies -1
			end
		if sniperallies > 0 then
			sniperallies = 0
			setPlayerWeapon(cno , 10)  -- Set Weapon to Sten
			return 1
		 end
	      end
	    end
	 end
	end
if cmd == "team" then
   if et.trap_Argv(1) == "r" then
	if et.trap_Argv(2) == "4" then
	  if et.trap_Argv(3) == "32" then
	   for j = 0, (maxclients - 1) do
		if getTeam(j) == 1 and getWeapon(j) == 32 then
		sniperaxis = sniperaxis +1
			end
		end
		if getWeapon(cno) == 32 then
			 sniperaxis = sniperaxis -1
			end
		if sniperaxis > 0 then
			sniperaxis = 0
			setPlayerWeapon(cno , 10)  -- Set Weapon to Sten
			return 1
		 end
	      end
	    end
	 end
	end
end -- gameformat check end
 
if cmd == "ws" then
	local n = tonumber(et.trap_Argv(1))
	if not n then
		et.G_LogPrint(string.format("wsfix: client %d bad ws not a number [%s]\n",cno,tostring(et.trap_Argv(1))))
		return 1
	end
 
	if n < 0 or n > 21 then
		et.G_LogPrint(string.format("wsfix: client %d bad ws %d\n",cno,n))
		return 1
	end
	return 0
end
if cmd == "callvote" or cmd == "ref" or cmd == "sa" or cmd == "semiadmin" then
	local args=et.ConcatArgs(1) 
--	et.G_LogPrint(string.format("combinedfixes: client %d %s [%s]\n",cno,cmd,args))
	if string.find(args,"[\r\n]") then
		et.G_LogPrint(string.format("combinedfixes: client %d bad %s [%s]\n",cno,cmd,args))
		return 1;
	end
	return 0
end
 
return 0
end --end ClientCommand
 
--  prevent various borkage by invalid userinfo
-- version: 4
-- history:
--  4 - check length and IP
--  3 - check for name exploit against guidcheck
--  2 - fix nil var ref if kicked in RunFrame
--      fix incorrect cno in log message for ClientConnect kick
--  1 - initial release
 
-- names that can be used to exploit some log parsers 
--  note: only console log parsers or print hooks should be affected, 
--  game log parsers don't see these at the start of a line
-- "^etpro IAC" check is required for guid checking
-- comment/uncomment others as desired, or add your own
-- NOTE: these are patterns for string.find
badnames = {
	'^ShutdownGame',
	'^ClientBegin',
	'^ClientDisconnect',
	'^ExitLevel',
	'^Timelimit',
	'^EndRound',
	'^etpro IAC',
	'^Vote',
	'^etpro privmsg',
-- "say" is relatively likely to have false positives
-- but can potentially be used to exploit things that use etadmin_mod style !commands
--	'^say',
	'^Callvote',
	'^broadcast',
	'^badinfo',
}
 
-- returns nil if ok, or reason
function check_userinfo( cno )
	if et.gentity_get(cno,"ps.ping") == 0 then return end
	local userinfo = et.trap_GetUserinfo(cno)
--	printf("check_userinfo: [%s]\n",userinfo)
 
	-- bad things can happen if it's full
	if string.len(userinfo) > 980 then
		return "oversized"
	end
 
	-- newlines can confuse various log parsers, and should never be there
	-- note this DOES NOT protect your log parsers, as the userinfo may
	-- already have been sent to the log
	if string.find(userinfo,"\n") then
		return "new line"
	end
 
	-- the game never seems to make userinfos without a leading backslash, 
	-- or with a trailing backslash, so reject those from the start
	if (string.sub(userinfo,1,1) ~= "\\" ) then
		return "missing leading slash"
	end
	-- shouldn't really be possible, since the engine stuffs ip\ip:port on the end
	if (string.sub(userinfo,-1,1) == "\\" ) then
		return "trailing slash"
	end
 
	-- now that we know it is properly formed, count the slashes
	local n = 0
	for _ in string.gfind(userinfo,"\\") do
		n = n + 1
	end
 
	if math.mod(n,2) == 1 then
		return "unbalanced"
	end
 
	local m
	local t = {}
 
	-- right number of slashes, check for dupe keys
	for m in string.gfind(userinfo,"\\([^\\]*)\\") do
		if string.len(m) == 0 then
			return "empty key"
		end
		m = string.lower(m)
		if t[m] then
			return "duplicate key"
		end
		t[m] = true 
	end
 
	-- they might hose the userinfo in some way that prevents the ip from being
	-- obtained. If so -> dump
	local ip = et.Info_ValueForKey( userinfo, "ip" )
	if ip == "" then
		return "missing ip"
	end
--	printf("checkuserinfo: ip [%s]\n", ip)
 
	-- make sure whatever is there is roughly valid while we are at it
	-- "localhost" may be present on a listen server. This module is not intended for listen servers.
	-- string.match 5.1.x
	-- string.find 5.0.x
	if string.find(ip,"^%d+%.%d+%.%d+%.%d+:%d+$") == nil then
		return "malformed ip"
	end
 
	-- check for this to prevent exploitation of guidcheck
	-- note the proper solution would be for chats to always have a prefix in the console. 
	-- Why the fuck does the server console need both
	-- say: [NW]reyalP: blah
	-- [NW]reyalP: blah
 
	local name = et.Info_ValueForKey( userinfo, "name" )
	if name == "" then
		return "missing name"
	end
--	printf("checkuserinfo %d name %s\n",cno,name)
	for _, badnamepat in ipairs(badnames) do
		local mstart,mend,cno = string.find(name,badnamepat)
		if mstart then
			return "name abuse"
		end
	end
	-- return nil
end
 
-- 3.2.6 and earlier doesn't actually call et_ClientUserinfoChanged 
-- every time the userinfo changes, 
-- so we use et_RunFrame to check every so often
-- comment this out or adjust to taste
infocheck_lasttime=0
infocheck_client=0
-- check a client every 5 sec
infocheck_freq=5000
 
function et_RunFrame( leveltime )
	if ( infocheck_lasttime + infocheck_freq > leveltime ) then
		return
	end
 
--	printf("infocheck %d %d\n", infocheck_client, leveltime)
	infocheck_lasttime = leveltime
	if et.gentity_get(infocheck_client, "pers.connected") ~= 0  then
		if et.gentity_get(infocheck_client,"ps.ping") ~= 0 then
			if ( et.gentity_get( infocheck_client, "inuse" ) ) then
				local reason = check_userinfo( infocheck_client )
				if ( reason ) then
					et.G_LogPrint(string.format("userinfocheck frame: client %d bad userinfo %s\n",infocheck_client,reason))
					et.trap_SetUserinfo( infocheck_client, "name\\badinfo" )
					et.trap_DropClient( infocheck_client, "bad userinfo", 0 )
					local guid = string.upper(et.Info_ValueForKey(et.trap_GetUserinfo(infocheck_client), "cl_guid"))
					global_ban_table[guid] = true
				end
			end
		end
	end
 
	infocheck_client = infocheck_client + 1
	if ( infocheck_client >= tonumber(et.trap_Cvar_Get("sv_maxclients")) ) then
		infocheck_client = 0
	end
 
	for cno=0, (maxclients-1) do
		counter[cno] = counter[cno] + 1
		if counter[cno] == 60000 then --lift ban after 1 minute (1 minute = 60000 ms)
			local guid = string.upper(et.Info_ValueForKey(et.trap_GetUserinfo(cno), "cl_guid"))
			global_ban_table[guid] = false
		end
	end
end
 
 
function et_ClientUserinfoChanged( cno )
--	printf("clientuserinfochanged %d\n",cno)
	local reason = check_userinfo( cno )
	local guid = string.upper(et.Info_ValueForKey(et.trap_GetUserinfo(cno), "cl_guid"))
	if ( reason ) then
		et.G_LogPrint(string.format("userinfocheck infochanged: client %d bad userinfo %s\n",cno,reason))
		et.trap_SetUserinfo( cno, "name\\badinfo" )
		et.trap_DropClient( cno, "bad userinfo", 0 )
		global_ban_table[guid] = true
	end
	for client = 0, (maxclients - 1) do
		local player_guid = string.upper(et.Info_ValueForKey(et.trap_GetUserinfo(client), "cl_guid"))
		local player_name = et.Info_ValueForKey(et.trap_GetUserinfo(client), "name")
 
		local player_name_cno = et.Info_ValueForKey(et.trap_GetUserinfo(cno), "name")
		local player_guid_cno = string.upper(et.Info_ValueForKey(et.trap_GetUserinfo(cno), "cl_guid"))
 
		if player_name == player_name_cno and player_name_cno ~= "ETPlayer" and player_name_cno ~= "UnnamedPlayer" and cno ~= client then
			et.G_LogPrint(string.format("userinfocheck: client %d badinfo %s\n",cno,"duplictae name"))
			et.trap_DropClient( cno, "duplicate name", 0 )
			global_ban_table[guid] = true
		elseif player_guid == player_guid_cno and player_guid ~= "NO_GUID" and player_guid ~= "UNKNOWN" and cno ~= client then
			et.G_LogPrint(string.format("userinfocheck: client %d badinfo %s\n",cno,"duplictae guid"))
			et.trap_DropClient( cno, "duplicate guid", 0 )
			global_ban_table[guid] = true
		end
 
		if (string.find(player_name_cno, "(%d+).(%d+).(%d+).(%d+)") or string.find(player_name_cno, "^.(%w+):(%d+)") or string.find(player_name_cno, "(%d+)%s(%d+)%s(%d+)%s(%d+)%s(%d+)")) and serverpassword == "" then
			et.G_LogPrint(string.format("userinfocheck: client %d badinfo %s\n",cno,"ip name"))
			et.trap_DropClient( cno, "ip name", 0 )
			global_ban_table[guid] = true
		end
	end
end
 
 
-- prevent etpro guid borkage
-- version: 1
-- TY pants
 
-- default to kick with no temp ban for now
DEF_GUIDCHECK_BANTIME = 0
 
function bad_guid(cno,reason)
	local bantime = tonumber(et.trap_Cvar_Get( "guidcheck_bantime" ))
	if not bantime or bantime < 0 then
		bantime = DEF_GUIDCHECK_BANTIME
	end
 
	et.G_LogPrint(string.format("guidcheck: client %d bad GUID %s\n",cno,reason))
	-- we don't send them the reason. They can figure it out for themselves.
	et.trap_DropClient(cno,"You are banned from this server",0)
	local guid = string.upper(et.Info_ValueForKey(et.trap_GetUserinfo(cno), "cl_guid"))
	global_ban_table[guid] = true
end
 
function check_guid_line(text)
--find a GUID line
	local guid,netname
	local mstart,mend,cno = string.find(text,"^etpro IAC: (%d+) GUID %[")
	if not mstart then
		return
	end
	text=string.sub(text,mend+1)
	--GUID] [NETNAME]\n
	mstart,mend,guid = string.find(text,"^([^%]]*)%] %[")
	if not mstart then
		bad_guid(cno,"couldn't parse guid")
		return
	end
	--NETNAME]\n
	text=string.sub(text,mend+1)
 
	netname = et.gentity_get(cno,"pers.netname")
 
	mstart,mend = string.find(text,netname,1,true)
	if not mstart or mstart ~= 1 then
		bad_guid(cno,"couldn't parse name")
		return
	end
 
	text=string.sub(text,mend+1)
	if text ~= "]\n" then
		bad_guid(cno,"trailing garbage")
		return
	end
 
--	printf("guidcheck: etpro GUID %d %s %s\n",cno,guid,netname)
 
	-- {N} is too complicated!
	mstart,mend = string.find(guid,"^%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x$")
	if not mstart then
		bad_guid(cno,"malformed")
		return
	end
--	printf("guidcheck: OK\n")
end
 
-- limit fakeplayers DOS
-- http://aluigi.altervista.org/fakep.htm
-- used if cvar is not set
-- confugration:
-- set ip_max_clients cvar as desired. If not set, defaults to the value below.
--FAKEPLIMIT_VERSION = "1.0"
DEF_IP_MAX_CLIENTS = 3
 
et.G_Printf = function(...)
		et.G_Print(string.format(unpack(arg)))
end
 
function IPForClient(cno)
-- TODO listen servers may be 'localhost'
	local userinfo = et.trap_GetUserinfo( cno ) 
	if userinfo == "" then
		return ""
	end
	local ip = et.Info_ValueForKey( userinfo, "ip" )
-- find IP and strip port
	local ipstart, ipend, ipmatch = string.find(ip,"(%d+%.%d+%.%d+%.%d+)")
	-- don't error out if we don't match an ip
	if not ipstart then
		return ""
	end
--	et.G_Printf("IPForClient(%d) = [%s]\n",cno,ipmatch)
	return ipmatch
end
 
function et_ClientConnect( cno, firstTime, isBot )
-- userinfocheck stuff. Do this before IP limit
--	printf("connect %d\n",cno)
 if et.gentity_get(cno,"ps.ping") ~= 0 then --allow omnibots
 
	local reason = check_userinfo( cno )
	if ( reason ) then
		et.G_LogPrint(string.format("userinfocheck connect: client %d bad userinfo %s\n",cno,reason))
		return "bad userinfo"
	end
 
-- note IP validity should be enforced by userinfocheck stuff
	local ip = IPForClient( cno )
	local count = 1 -- we count as the first one
	local max = tonumber(et.trap_Cvar_Get( "ip_max_clients" ))
	if not max or max <= 0 then
		max = DEF_IP_MAX_CLIENTS
	end
	-- et.G_Printf("firstTime %d\n",firstTime);
	-- it's probably safe to only do this on firsttime, but checking
	-- every time doesn't hurt much
 
	-- validate userinfo to filter out the people blindly using luigi's code
	local userinfo = et.trap_GetUserinfo( cno )
	-- et.G_Printf("userinfo: [%s]\n",userinfo)
	if et.Info_ValueForKey( userinfo, "rate" ) == "" then 
		et.G_Printf(""..modname..": invalid userinfo from %s\n",ip)
		return "invalid connection"
	end
 
	for i = 0, et.trap_Cvar_Get("sv_maxclients") - 1 do
		-- pers.connected is set correctly for fake players
		-- can't rely on userinfo being empty
		if i ~= cno and et.gentity_get(i,"pers.connected") > 0 and ip == IPForClient(i) then
			count = count + 1
			if count > max then
				et.G_Printf(""..modname..": too many connections from %s\n",ip)
				-- TODO should we drop / ban all connections from this IP ?
				return string.format("only %d connections per IP are allowed on this server",max)
			end
		end
	end
 end
	local guid = string.upper(et.Info_ValueForKey(et.trap_GetUserinfo(cno), "cl_guid"))
 	if global_ban_table[guid] then 
		return "You are disallowed to reconnect for one minute"
	end
end
-- NoAutoDeclare()
 
-- Perlo_0ung
-- rifle module
 
function et_ClientSpawn(cno,revived)
		if revived == 0 and et.gentity_get(cno, "sess.playerType") == 2 then
			et.gentity_set(cno,"ps.ammo",39,3)
			et.gentity_set(cno,"ps.ammo",40,3)
		end
end
 
-- Perlo_0ung?!
-- votefix version 2
-- lowers the mapname in "callvote map" command. This fixes the bug with the wrong mapscripthash of .script files.
-- note mapscripts (.script) have to be lower caps
et.CS_VOTE_STRING = 7
 
function et_Print(text)
	check_guid_line(text)
 
	local t = ParseString(text)  --Vote Passed: Change map to suppLY
	if t[2] == "Passed:" and t[4] == "map" then 
		if string.find(t[6],"%u") == nil or t[6] ~= getCS() then return 1 end
			local mapfixed = string.lower(t[6])
			et.trap_SendConsoleCommand( et.EXEC_APPEND, "ref map " .. mapfixed .. "\n" )
	end
end
 
-- helper functions
 
function ParseString(inputString)
	local i = 1
	local t = {}
	for w in string.gfind(inputString, "([^%s]+)%s*") do
		t[i]=w
		i=i+1
	end
	return t
 end
 
function getCS()
	local cs = et.trap_GetConfigstring(et.CS_VOTE_STRING)
	local t = ParseString(cs)
	return t[4]
end
 
function getWeapon(playerID)
    return et.gentity_get(playerID, "sess.playerWeapon")
end 
 
function getTeam(playerID)
    return et.gentity_get(playerID, "sess.sessionTeam")
end 
 
function setPlayerWeapon(playerID , weapon)
    et.gentity_set(playerID, "sess.latchPlayerWeapon", weapon)
end