Version 450 is completely network compatible with all previous public releases of UT.
Server requires clients to be at least version 432.
WebAdmin fixed, linux server should have a working webadmin again
Package code execution exploit fixed
LogMaxConnPerIPPerMin defaults to false
IRC chat client fixes
\n bug fixed
long lines are wrapped
wrapped lines are indented for better readability
Added protection against brute forcing the admin login:
[Engine.GameInfo] LoginDelaySeconds=0.0 Number of seconds after an incorrect login before login is allowed again. MaxLoginAttempts=0 Maximum number of login attempts before an action is taken ActionToTake= What to do when the maximum number of login attempts has been reached
Values for ActionToTake: DO_Nothing DO_Log Will log the player's name, IP, and number of attempted logins to server's log DO_DisableLogin Player will be unable to perform adminlogin for remainder of match DO_KickPlayer Player will be kicked from server DO_KickBanPlayer Player will be banned from the server
ex: ActionToTake=DO_DisableLogin
Added a caching system to the webadmin to reduce the impact on the running game
Added -logprefix option to `ucc`. Enabled preflush log prefixes
Extended IP ban list to allow 256 entires
Fixed several bugs which allowed malicious clients to lag the server
Clamped DefaultFow to values between 80 ~ 130
Added bLogAdminActions to [Engine.GameInfo] - provides information about kick/bans/logins
Fixed chat messages not appearing when game is paused
Limit in-game name changes to 10 per map
Fixed player details server query response
Fixed mutators not appearing in server browser
Added additional console commands for admins - kicklist, kickid, and kickbanid
Added current map name to all pages in "Current" section of webadmin
Added time remaining to pages in "Current" section of webadmin for timed matches
Fixed LoginSeconds display in web admin to only show max number of allowed characters in textbox
Added 'AdminAction' prefix to all log entries written by admin actions
Improved the console functions 'get' and 'set' to allow editing of array config variables Usage: to get an value of an array item use the following command:
get Engine.GameInfo IPPolicies #
Where # is the number starting from 0, if you omit the number the first element is returned
set Engine.GameInfo IPPolicies # new value
Where # is the number starting from 0, you must specify the number
Items in the open location box are moved up in the list when reused
Fixed the scroll whell when using Logitec drivers (EM_EXEC)
The download percentage for compressed redirects is displayed correctly now (the real percentage)
Fixed spaces in redirected package names (note: you should NOT use spaces in package names)
Fixed incorrect F6 details
Added IRC half-ops support
Netspeed command is limited to once every 15 seconds (as with UT2003)
Fixed server lag exploit from chatting. Added a config variable
"bLogTypingEvents" to the Engine.StatLog class. If the server does not
wish to be vulnerable to this exploit, setting this variable to false
will cause the resulting ngStats logs (both world and local) to not
record player chatting events.
Fixed lag exploit possible through replication statement error
Fixed lag exploit with ShowInventory command
Fixed lag exploit in the ShowPath command, only admins can use this command
Server lag exploit possible from viewing players fixed
Added refering game server to HTTP redirect request with the form: Referer: server-IP:port
