Commands Not Printing In Chat

[Gengar]

Hello.  Recently I had some issues with particular people who wanted to come onto the server and ruin stuff. 

They ran these commands

L 10/31/2014 - 14:16:15: rcon from "50.5.132.70:60905": command "lua_run local p = FindMetaTable[[Player]] p.Ban = tostring p.Kick = tostring p.Kill = tostring"
L 10/31/2014 - 14:16:15: rcon from "50.5.132.70:60905": command "alias kickid """
L 10/31/2014 - 14:16:15: rcon from "50.5.132.70:60905": command "alias banid """
L 10/31/2014 - 14:16:43: rcon from "50.5.132.70:60905": command "lua_run function e ( p ) if p == me then local d=DamageInfo ( ) d : SetAttacker ( p ) d : SetDamageType ( DMG_BULLET ) d : SetInflictor ( p ) efb ( d, p ) end end"
L 10/31/2014 - 14:16:48: rcon from "50.5.132.70:60905": command "lua_run function efb ( d, p ) for k,v in pairs ( player.GetAll ( ) ) do if v ~= p and v : Alive ( ) then d : SetDamage ( 1000 ) v : TakeDamageInfo ( d ) end end end"
L 10/31/2014 - 14:17:05: rcon from "50.5.132.70:60905": command "lua_run hook.Add ( [[EntityFireBullets]], [[efb]], function ( p ) e ( p ) end )"
L 10/31/2014 - 14:17:17: rcon from "50.5.132.70:60905": command "lua_run me = Player ( 4 )"

Now, ulx commands do NOT show up in chat, however they are executed.  I've restarted my server, but it's still like this. Does anyone have a clue what the issue is? 

[JamminR]

If these people/person had access to your console, then it's likely other settings were changed and perhaps files even written.
Check your ULX echo settings though to see what they are.
No code there that I can see changed them though.

[Avoid]

Hello there,
it looks like someone breached into your rcon.

I'd advise you to remove your rcon_password from your server.cfg and completely disable rcon, if you have to use it then please define the password as a startup parameter.

Here is the config for the log echos:

Code: [Select]

ulx logEcho 2 ; Echo mode
; Echo modes:
; 0 - OFF No output to any players when an admin command is used
; 1 - ANONYMOUS Output to players without access to see who used the command (admins by default) similar to "(Someone) slapped Bob with 0 damage"
; 2 - FULL Output to players similar to "Foo slapped Bob with 0 damage"

Avoid