TS3.ini files

[ECF]

As many of you know TS3 has the ability to create and use an ini file to store variables in much like TS2 did.

 

I want to take a minute to remind all authorized hosters to not allow clients access to this. All your server variables should be set in the commandline where users do not have access to them.

 

This will secure the variables and not let the client change them via FTP or filemanager if you forgot to shut them off. If a client can access the server's ini file they may be able to turn on file downloads and make other unwanted changes to their server.

 

Just an FYI for everyone. Sometimes we forget the simple thing that cause huge issues later