Security Risk!!!!

twistie82 · Post by **twistie82** » Sun Dec 02, 2001 2:10 pm

hiya

i think ive found a security flaw in lol's tools , it allow any added user access to the bot WITHOUT a +p flag on there user record

any1 know of a fix or a way to stop this happening!?

cheers

ppslim · Post by **ppslim** » Sun Dec 02, 2001 2:48 pm

At the very bottom of your config file, add the line "set require-p 1"

Post by **caesar** » Sun Dec 02, 2001 5:16 pm

Hi, what version of lol toolz are you using ?

twistie82 · Post by **twistie82** » Mon Dec 03, 2001 3:38 am

Do i put it at the bottom of Lol.tcl or My eggdrop Conf ???

twistie82 · Post by **twistie82** » Mon Dec 03, 2001 3:50 am

neer mind ppslim It works Good now