Shelling and Byond

ID:136379
 
Dec 1 2002, 7:17 pm
does byond have a system command where the hosting software can shell out or can invoke a system command. sorry for the paranoia but these days you can't be too sure. thanks
Dec 1 2002, 7:42 pm
There is a shell command, but I think the hosting software defaults to some kind of secure mode that will limit it. There should be plenty of information in the online reference (see link on left) -- search for "shell" or "secure".
Dec 2 2002, 6:58 pm
In response to Gughunter
With the default host server running in "safe" or "ultrasafe" mode, you need to have no fear. All questions are prompted before executing, so that you as the host can manually check to make sure it isn't lethal to your machine. I'm not quite sure how this works with dreamdaemon, however, since it's not run with a "host" character to ask the questions to.
Dec 3 2002, 1:35 pm
In response to Polatrite
Dream Daemon will automatically fail any command that exceeds the limits of the safety restrictions. Trying out a shell("format c: /y") command on a Windows box will generate an error message in Dream Daemon unless it is being run in Trusted mode. Dream Daemon defaults to Safe, so there's nothing to worry about.

For those who are too lazy to check out the security levels, here they are:
- Trusted: the game DMB has access to any file on your PC. The shell() command is enabled and will work without prompting for confirmation.
- Safe: the game DMB has access to any file in the game directory. The shell() command is disabled (prompts for permission in Dream Seeker, automatically fails in Dream Daemon).
- Ultra-Safe: the game DMB has no access to any file without explicit permission given in Dream Seeker. All access will automatically fail in Dream Daemon.