Some advanced possibillities for handling admins, especially v2 Admins. Some things I had thought of:
- Revoking accounts, rather than deleting them altogether. Some clans use a suspension thing for moderators that violated policies... revoking their accounts and reinstating them could save a lot of the hassle involved with deleting and readding them. A command would have to be added such as admin_revoke for v1 and admin revoke for v2... as well as admin_reinstate and admin reinstate. A custom message could also be shown to them stating that their account has been revoked should they try logging in.
- Events for failed logins and failed RCON attempts. Have a variable increasing with each failed attempt within a certain grace period (much like the way tk counts work I guess), and allow servers to have more flexibillity over rules for failed RCON attempts and failed SAPP Login events, such as revoking the account (above suggestion) after x tries, IP Banning the user, or kicking the user. Maybe something like event_badlogin and event_badrcon as well as $failedrcons and $failedlogins.
- This is probably a stupid idea, but it never hurts to ask/mention it. More control over passwords would be a nice thing to have... such as length (I know that stock SAPP is 4-15, but it'd be nice to have the flexibillity to change this), characters allowed/not allowed, making admins reset their passwords every so often, and rules such as "Must not have been a previously used password" "Can not be the last used password" "Can not contain username" and "Must be mixed case." Most forum softwares and other modern things have these features for security, so why not SAPP?
- A command to flag a user to force them to change their password at the next successful login. Something like admin force_pwchange that would display a prompt to the user to use the change_password command to set a new password before using any of their commands. A couple of reasons that this could be used are if an admin expects someone is tampering with their account, or for the failed logins event (see above suggestion).
- A command to view a list of who is logged in. Something like admins_online that could output something like this:
Code:
Name: Logged In As: Lvl: Type:
Admin1 Admin1 4 v2
APlayer Admin2 1 v1