fix #4949:

default disable AllowSpectatorJoin as it allows unauthenticated clients to connect
spring · Sep 10, 2015 · 002857e · 002857e
1 parent d65475e
commit 002857e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rts/Net/GameServer.cpp b/rts/Net/GameServer.cpp
@@ -70,7 +70,7 @@ using boost::format;
 CONFIG(int, AutohostPort).defaultValue(0);
 CONFIG(int, SpeedControl).defaultValue(1).minimumValue(1).maximumValue(2)
 	.description("Sets how server adjusts speed according to player's load (CPU), 1: use average, 2: use highest");
-CONFIG(bool, AllowSpectatorJoin).defaultValue(true).description("allow any unauthenticated clients to join as spectator with any unchecked name, thus permitting impersonation");
+CONFIG(bool, AllowSpectatorJoin).defaultValue(false).description("allow any unauthenticated clients to join as spectator with any unchecked name, thus permitting impersonation");
 CONFIG(bool, WhiteListAdditionalPlayers).defaultValue(true);
 CONFIG(bool, ServerRecordDemos).defaultValue(false).dedicatedValue(true);
 CONFIG(bool, ServerLogInfoMessages).defaultValue(false);