Security Features

typedef struct banList_s {
  time_t expire;                    // Expiration timestamp
  time_t created;                   // Creation timestamp
  int playeruid;                    // Player UID
  int adminuid;                     // Banning admin's UID
  char pbguid[9];                   // PunkBuster GUID (8 chars)
  char reason[128];                 // Ban reason
  char playername[MAX_NAME_LENGTH]; // Player name
} banList_t;

typedef struct {
  netadr_t remote;      // IP address
  char banmsg[128];     // Ban message
  int uid;              // Player UID
  char guid[9];         // GUID
  unsigned int timeout; // Internal timeout
  int expire;           // Expiration time
  int systime;          // System time
  int adminuid;         // Admin UID
} ipBanList_t;

void SV_InitBanlist() {
  Com_Memset(ipBans, 0, sizeof(ipBans));
  banlistfile = Cvar_RegisterString("banlist_filename", "banlist.dat", CVAR_INIT, ...);
  ipbantime = Cvar_RegisterInt("banlist_maxipbantime", 240, 0, 20160, 0, ...);
  // Load banlist from file
  SV_LoadBanlist();
}

qboolean SV_AddBan(int uid, int auid, char* guid, char* name, 
                   time_t expire, char* banreason)

void SV_PlayerAddBanByip(netadr_t* remote, char* reason, int uid, 
                         char* guid, int adminuid, int expire)

qboolean SV_RemoveBan(int uid, char* guid, char* name)

dumpbanlist

0 uid: 300123456; nick: Player1; guid: abc12345; adminuid: 300999999; expire: Never; reason: Hacking
1 uid: 300234567; nick: Player2; guid: def67890; adminuid: 300999999; expire: Mon Jan 15 2024; reason: Toxic behavior
10 Active bans

char* SV_PlayerIsBanned(int uid, char* pbguid, netadr_t* addr, 
                        char* message, int len)

char* SV_PlayerBannedByip(netadr_t* netadr, char* message, int len)

Enforcing prior ban
You have been permanently banned from this server
You will be never allowed to join this gameserver again
 Your UID is: 300123456    Banning admin UID is: 300999999
Reason for this ban:
Hacking detected
[Appeal URL if configured]

Enforcing prior kick/ban
You have been temporarily banned from this server
Your ban will expire in
 2 days 5 hours 30 minutes
 Your UID is: 300123456    Banning admin UID is: 300999999
Reason for this ban:
Toxic behavior
[Appeal URL if remaining time >= banlist_appealminhours]

uid\300123456\nick\Player1\rsn\Hacking\exp\-1\create\1704067200\auid\300999999\
uid\300234567\nick\Player2\rsn\Toxic\exp\1704153600\create\1704067200\auid\300999999\
guid\abc12345\nick\Player3\rsn\Cheating\exp\-1\create\1704067200\auid\300999999\

void SV_LoadBanlist() {
  // Open banlist file
  FS_SV_FOpenFileRead(banlistfile->string, &file);
  
  // Parse each line
  for (i = 0, error = 0; error < 32; i++) {
    read = FS_ReadLine(buf, sizeof(buf), file);
    if (!SV_ParseBanlist(buf, aclock, i + 1))
      error++;
  }
}

void SV_WriteBanlist() {
  // Open temporary file
  file = FS_SV_FOpenFileWrite(va("%s.tmp", banlistfile->string));
  
  // Write only active bans
  for (i = 0; i < current_banindex; this++, i++) {
    if (this->expire == (time_t)-1 || this->expire > aclock) {
      // Format infostring and write
    }
  }
  
  // Rename temp file to banlist
  FS_SV_HomeCopyFile(va("%s.tmp", banlistfile->string), banlistfile->string);
}

if (Auth_Authorize(username, password) < 0) {
  Com_Printf("^1Invalid login\n");
  SV_PlayerAddBanByip(&request->remote,
    "Invalid login attempt. You have to wait 20 seconds", 
    0, NULL, 0, Com_GetRealtime() + 10);
}

badrcon:
  Com_Printf("Bad rcon from %s (TCP)\n", NET_AdrToString(from));
  SV_PlayerAddBanByip(from, "Bad rcon", 0, NULL, 0, Com_GetRealtime() + 20);

if (Auth_Authorize(username, password) < 0) {
  SV_DropClient(invoker, "Incorrect login credentials.\n");
  return;
}

duration = expire - Com_GetRealtime();
if (duration > ipbantime->integer * 60 || expire == -1)
  duration = ipbantime->integer * 60;

if (i == MAX_IPBANS) {
  list = &ipBans[oldest];  // Replace oldest ban
}

void SV_RemoveBanByip(netadr_t* remote, int uid, char* guid)

set banlist_appealurl "https://your-website.com/appeal"
set banlist_appealminhours 4

if (sv_banappealminhours && srem < sv_banappealminhours->integer * 60 * 60) {
  appealmsg[0] = '\0';  // Hide appeal URL
}

if (expire < aclock && expire != (time_t)-1) {
  return qtrue;  // Skip this ban
}

if (this->expire == (time_t)-1 || this->expire > aclock) {
  // Write ban to file
}

int remaining = (int)(expire - Com_GetRealtime());
int d = remaining / (60 * 60 * 24);
remaining = remaining % (60 * 60 * 24);
int h = remaining / (60 * 60);
remaining = remaining % (60 * 60);
int m = remaining / 60;