[Freeciv-Dev] (PR#11851) Hack request should verify userid in addition to random string

["Reinier Post" <rp@xxxxxxxxxx>]

<URL: http://bugs.freeciv.org/Ticket/Display.html?id=11851 >

See also

  http://forum.freeciv.org/viewtopic.php?p=6069#6069

My question: it seems a lot cleaner and more secure to do away
with all the special code and instead just let the client write
a temporary startup file containing the /cmdlevel hack command,
then make it invoke the server as

  civserver -r mygenerated.rc

That would be doing things "the Unix way".
As far as I can see, all the hackery can go.

You don't need to implement any additional authorization checks.
The only thing that needs to be checked is if the special startup
file is written correctly.  You don't even need to do that if it comes
with the distribution (but then it may be edited, causing things to fail).

Let me know if there's something I'm missing.