# HG changeset patch # User Ryan Stecker # Date 1338081061 -3600 # Node ID 688718339debff3a07420ec8f9b4a63d36b5e164 # Parent c9fd86b6bec3af8a2d6d09376cb4a66b81c37db4 Added missing SteamAuthstringValidation config option (bug 4837, r=asherkin). diff -r c9fd86b6bec3 -r 688718339deb configs/core.cfg --- a/configs/core.cfg Sun May 27 01:51:08 2012 +0100 +++ b/configs/core.cfg Sun May 27 02:11:01 2012 +0100 @@ -107,4 +107,12 @@ * Currently this will log details about the gamedata updating process. */ "DebugSpew" "no" + + /** + * If set to yes, SourceMod will validate steamid auth strings with the Steam backend before giving out admin access. + * This can prevent malicious users from impersonating admins with stolen Steam apptickets. + * If Steam is down, admins will not be authenticated until Steam comes back up. + * In general, this option should be set to "yes" to increase the security of your server. + */ + "SteamAuthstringValidation" "yes" }