I think Butcha wrote the script - so the spelling mistakes and comments will be his own.
Other than that - that is one of the worst filters I have ever seen:
- It has manual checks on EVERY single property to see if they are bad strref, rather than using a simple 2da lookup - rofl.
- It doesnt validate skills correctly, you can log in quite easily with 200 of EACH skill.
- You can be a halfling with a creature size of 5.
- The only banned null appearance is the INVISIBLE_HUMAN_MALE.
- It doesnt verify you have any body parts.
- It tries to do a manual verification against allowed spells, but you can quite easily log on as a level 1 character with a dozen hellballs - rofl.
- It only removes "BAD" effects at login, god alone knows why they would do that.
- They have a 30 second delay on entry - this is due to the amateurish way that they use "DelayCommand" in order to create steps during validation. If this were done properly, it would take between 3 and 5 seconds MAX. Try logging on with a 32MB char
- They have an entire section dedicated to Removing Monster Abilities - which they have commented out! Not to mentiuon the fact that it wouldnt work anyway, and has been attempted in completely the wrong way - rofl.
- They dont calculate or validate AC. You could be a 150AC Str Scyther.
- Dont calculate or validate HP. Have up to 1550HP if you like....
- They say they remove the epic AB bug - but they dont even calculate it! Feel free to make a pure wiz with 30ab if you like...
- Feel free to cap each of your saving throws at 75, and have 66 of each ability...
Im sure there are many more, but these ones just scream out "laugh at me and my skillz" on a quick scan.
One thing they do, however, is make sure that you have at least 2 characters in your characters name. Im sure that will protect them against all the nastys. Try this "<c000>" as your char name.
All in all
LOL LOL LOL LOL LOL