From 6aca18193a53343606b56d15c6f800a173084a19 Mon Sep 17 00:00:00 2001 From: Ryan Stecker Date: Sun, 27 May 2012 02:11:01 +0100 Subject: [PATCH] Added missing SteamAuthstringValidation config option (bug 4837, r=asherkin). --- configs/core.cfg | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/configs/core.cfg b/configs/core.cfg index 49b55525..e1d543e1 100644 --- a/configs/core.cfg +++ b/configs/core.cfg @@ -107,4 +107,12 @@ * Currently this will log details about the gamedata updating process. */ "DebugSpew" "no" + + /** + * If set to yes, SourceMod will validate steamid auth strings with the Steam backend before giving out admin access. + * This can prevent malicious users from impersonating admins with stolen Steam apptickets. + * If Steam is down, admins will not be authenticated until Steam comes back up. + * In general, this option should be set to "yes" to increase the security of your server. + */ + "SteamAuthstringValidation" "yes" }