Added missing SteamAuthstringValidation config option (bug 4837, r=asherkin).
Added missing SteamAuthstringValidation config option (
bug 4837, r=asherkin).
1.1 --- a/configs/core.cfg Sun May 27 01:51:08 2012 +0100
1.2 +++ b/configs/core.cfg Sun May 27 02:11:01 2012 +0100
1.3 @@ -107,4 +107,12 @@
1.4 * Currently this will log details about the gamedata updating process.
1.5 */
1.6 "DebugSpew" "no"
1.7 +
1.8 + /**
1.9 + * If set to yes, SourceMod will validate steamid auth strings with the Steam backend before giving out admin access.
1.10 + * This can prevent malicious users from impersonating admins with stolen Steam apptickets.
1.11 + * If Steam is down, admins will not be authenticated until Steam comes back up.
1.12 + * In general, this option should be set to "yes" to increase the security of your server.
1.13 + */
1.14 + "SteamAuthstringValidation" "yes"
1.15 }