Re: (No) Security danger when using OLC

From: George (greerga@DRAGON.HAM.MUOHIO.EDU)
Date: 10/31/97

On Sat, 1 Nov 1997, Chagai Kofler wrote:

>Lately I came across a security danger when you let builders use OLC.
>If your MUD supports OLC with affection feature of objects like
>level or exp, an object with +level may advance your builders to the
>position of an Imp and therefor giving them the priveleged commands
>that they are not supposed to use.

    /* ??? GET_LEVEL(ch) += mod; */

It is not implemented.

>One of my builders tried this trick on my MUD and deleted the Imps.
>Although they cant take over the MUD, still they could perform some
>annoying acts.

You should've thought about why that line was commented and its possible
implications. :)

George Greer  -   | Genius may have its limitations, but stupidity | is not thus handicapped. -- Elbert Hubbard

     | Ensure that you have read the CircleMUD Mailing List FAQ:  |
     | |

This archive was generated by hypermail 2b30 : 12/08/00 PST