Peace-Maker 91a1fd074b Fix sql injection in sql-admin-manager plugin ...

This bug was found as part of justCTF 2020 in the PainterHell challenge by cypis. Thank you!

Admins with the root flag could inject their own queries towards the admin database connection.

The sql-admin-manager plugin is disabled by default.

2021-02-02 11:20:02 +01:00

..

admin-flatfile

Update small plugins for transitional syntax (#506)

2016-05-11 09:32:34 -04:00

adminmenu

Fully convert dynamicmenu to transitional enum structs. (#1082)

2019-09-15 14:02:46 -07:00

basebans

Fixed unauthorized menu usages (#1374)

2020-11-05 11:34:00 +01:00

basecomm

Improvements on !admin menu flags (#1364)

2020-10-24 23:52:35 +00:00

basecommands

Fixed unauthorized menu usages (#1374)

2020-11-05 11:34:00 +01:00

basevotes

Prevent voteban evading & add ban length cvar (#1249)

2020-06-13 16:00:44 -07:00

funcommands

Use GetCmdArgInt(Ex) in base plugins (#1203)

2020-03-04 22:07:00 +00:00

funvotes

Ignore vote actions if target is no longer available (#649)

2017-08-22 20:56:12 +01:00

include

Update note about non-existing SQL_MoreResults (#1416)

2021-01-14 14:50:15 +00:00

playercommands

Making rename's LogAction message consistent... (#696)

2017-09-26 20:22:38 -04:00

testsuite

Use GetCmdArgInt(Ex) in base plugins (#1203)

2020-03-04 22:07:00 +00:00

admin-sql-prefetch.sp

Update small plugins for transitional syntax (#506)

2016-05-11 09:32:34 -04:00

admin-sql-threaded.sp

Introduce enum structs to core sm plugins

2018-12-15 13:51:03 -08:00

adminhelp.sp

Replace GetCmdArgs with args param (#1229)

2020-05-08 15:09:44 -07:00

adminmenu.sp

Create GlobalForward & PrivateForward methodmaps (#1004)

2019-05-29 14:17:42 -07:00

AMBuilder

Remove use of the Dep API.

2020-08-24 20:48:57 -07:00

antiflood.sp

Introduce enum structs to core sm plugins

2018-12-15 13:51:03 -08:00

basebans.sp

Introduce enum structs to core sm plugins

2018-12-15 13:51:03 -08:00

basechat.sp

Do not require quotes around message in sm_psay (#1300)

2020-07-01 18:58:20 +01:00

basecomm.sp

Fix basecomm failing to load on games without sv_alltalk (#1212)

2020-03-11 21:24:16 -07:00

basecommands.sp

Prevent basecommands from printing to disconnected clients (#1138)

2020-02-06 22:32:16 -08:00

basetriggers.sp

Collection of plugin cleanups (#777)

2018-07-12 11:16:18 -07:00

basevotes.sp

Prevent voteban evading & add ban length cvar (#1249)

2020-06-13 16:00:44 -07:00

clientprefs.sp

cookies: Align output with sm_help (#977)

2020-07-08 20:38:35 -07:00

compile.sh

Add spacing to compile.sh (#53)

2016-10-24 14:50:24 +01:00

funcommands.sp

Change sm_beacon to use game-specific team colors (#1187)

2020-02-23 14:03:00 +00:00

funvotes.sp

Fix wrong formatting to "Vote Delay Minutes" when delay above 60s (#1009)

2019-05-13 00:20:47 +01:00

mapchooser.sp

mapchooser: Add option for persistent map storage (#1183)

2020-07-08 19:56:26 -07:00

nextmap.sp

Alert players of map history console output (#1242)

2020-05-08 15:04:57 -07:00

nominations.sp

Prevent clients from spamming global chat using sm_nominate (#1217)

2020-03-21 17:24:45 +00:00

playercommands.sp

Update small plugins for transitional syntax (#506)

2016-05-11 09:32:34 -04:00

randomcycle.sp

Add new function: GetMapDisplayName.

2015-09-15 16:16:58 -04:00

reservedslots.sp

Update small plugins for transitional syntax (#506)

2016-05-11 09:32:34 -04:00

rockthevote.sp

Collection of plugin cleanups (#777)

2018-07-12 11:16:18 -07:00

sounds.sp

Show errors for methods that are unused. (bug 6183)

2014-07-12 10:28:29 -07:00

sql-admin-manager.sp

Fix sql injection in sql-admin-manager plugin

2021-02-02 11:20:02 +01:00