[CS1.6\BUG] "timerefresh" only with sv_cheats 1

[ghost]

#273

It does not work properly. It is enough to enable sv_cheats 1 on the client side, being on the server at this time and timerefresh is working again!

[ghost]

CS 1.6 [Build 8245] "timerefresh" still exploited by intruders!
The scenario is the same: the intruder visits any server, writes "sv_cheats 1" in the client console and timerefresh works again, allowing his to get an advantage.

This is a high priority issue.

[BUXPb]

I confirm. There is still an error in CS 8254.

[mikela-valve]

@BUXPb CS 8254 should actually have this fixed. sv_cheats is now restricted to only being set on the server and the current value is sent down to all clients whenever it changes. Ensure you test this by connecting to another server also running CS 8254 and trying to enable sv_cheats. It should fail and inform you that it can only be set by the server (i.e. only by the client running the listen server or someone with access to the dedicated server).

Make sure you're opted into the beta for both CS and HL1 as this was an engine fix so the change is pulled in from HL1 not CS.

[Maxi605]

I believe this should be closed as it was here: #273

[kisak-valve]

Closing per the last couple comments.