UKTerrorist

Admin Mod - Security Update

Posted by NoToRiOuS at 04:01 18/2/2002.

There have been some security updates on the Admin Mod site. It is worth checking out for those server admins that use AM.

When using regular expressions in your users.ini file (i.e. use_regex set to 1) make sure you have a complete regex and that it matches only what you want it to match. Special characters which are often forgotten are the start "^" and end "$" characters.

Remember, when you have a line like "theo:somepass:12345" in your users.ini and use_regex set, then also the names "theodor" or "antheom" will match and gain admin access. Check if you actually meant "^theo$:somepass:12345"

For more information visit the AM site.