disable /register, /login, /logout

[Luke_Ferrara]

is there anyway to disable players from using /register, /login and /logout, I ask because i have a gui window that registers and logs players in but what i found my players have been doing is /logout out with $50000 and /register with new account and then wire transfer that $50000 to their main account so is there anyway to disbable these commands??

[robhol]

Add them to the ACL's Everyone group (command.register, command.login, etc) and disable access. Login and logout are hardcoded, I've asked the developers to "un-hardcode" it, remove it from the client and make it a separate resource, but... it hasn't happened so far, despite the obvious advantages.

As for register, that is a part of the Admin resource, believe it or not, just search for "register" (quotes included) and you should be able to find the corresponding addCommandHandler statement rather easily.

In this case, you might also want to set up some kind of system that alerts admins when accounts are being made from the same IP or the same serial. Blocking registrations is a bad idea since IPs change and there's something called LAN, and there's some whining about serials being imperfect, so I wouldn't advise it.. but if you just log these occurences somewhere and send a notification to an admin when they happen, you may be able to take action.

[subenji99]

Quick Note:

In the admin resource, you are not going to find a line such as

addCommandHandler("register",registerHandler,true)

This is because all the admin commands are saved in 'commands.xml' and that file is parsed recursively.

Commenting the line in that xml file works as you would expect however.

I forget the path to that file off the top of my head, but you shouldn't have a problem finding it.