i actually only want to know if and also how it works.

Cool.

Change the home path directory of Sauerbraten to just C:\ or D:\ instead of "data" or "packages" within the code.
It sounds like an idea,that could make your Sauer freeze for about half an hour.

Hacker!

does it also Show files not known by sauer? and does it also Show Folders? or does it only Show .mp3, .txt, .cfg, .ogg, and the other common sauer files?

It does not discern between files and folders. There's no way to reliably know whether something without extension is a folder.

Can Sauerbraten detect if there is something? can Sauerbraten detect any file on my pc (possilbly)?

The second string, the one I set in BOTH commands to "" is a filter for the file extension. It will search for whatever filetype you put in there. For multiple file types you gotta have to use multiple commands.
Setting it to "" as I did will act as a wildcard, showing any folder and any file, regardless if the format is known to sauer or not.

The custom maps menu uses a loopfiles btw. You can find it in the data/menus.cfg. Since it only works with maps, it looks for the .ogz extension. The line looks something like this:

loopfiles curmap "packages/base" "ogz" [stuff happening]

Using $curmap inside the brackets, you can grab the filenames it found.

I had an idea for a check if something is a folder or not. When you find something without extension, you can try to navigate into the folder in question. When it contains something, it's definitely a folder. When it is empty, it is either a file or an empty folder. In both cases probably not that interesting, at least for a music player.

This is a little bit brute force, but might work.

I think it's good that you posted it.

There once was talk if you could automatically alter files via cubescripts focus, select, copy & paste and the ingame notepad (if you knew the file-path).

Although belief was it's not possible, it would feel much safer if some of our cubescript cracks could check it out. And also see if a malicious script could really only be spread by /do $maptitle (or inside custom configs or scripts.) (there were also fears of force-getmaps somehow being able to execute this stuff)

Oh, you can happily mess with files. And it is very possible to copy file contents into cubescript strings. I have seen how someone does it and I tried it on my local files as well.

You can NOT rewrite the files, e.g. read a file, concat a malicious script to the end, write into file.
Cubescript back to file is AFAIK not possible.

What you CAN do is overwriting files with emptyness or crap from already existing files. When you tell it to, Sauerbraten blindly tries to open anything like a text file. You can not copy cubescript strings into the textbuffer, but you CAN just write the empty textbuffer. This is another thing I tried locally. I added a random picture file to my sauerbraten main directory and then overwrote it with an empty text. The pic was absolutely useless afterwards.

So you can basically open a file, read it's content and then destroy it by overwriting it with nothingness, which is IMO more than enough damaging potential.

oh O.o thanks for the info!
I could never figure these textfocus copy and paste out, they are commands so I always thought you could use them to paste something into a file, then save...

As I said, when you use .. as foldername, you can navigate out of sauer's home, at least on Linux. I also once saw that finkus guy abuse this with his maptitle-remote-control-bullshit to take a walk in someone else's file system.

@somedude: thanks, i will look into that. but as papriko said multiple times you can get outside of Sauerbraten Folder to everywhere on you pc. e.g. "music ../../../../Music/file.ogg" whereas the first "../" stands for going out of packages, second going out of Sauerbraten, third going out of programs(x86), fourth going out of C:\\ and then into Music/ and you got your file. (maybe i messed something up there, but this is how it works basically (if have Sauerbraten installed on my Desktop))
@papriko: i have also heard of that guy. i will try not to abuse this :P

You caught me. I didn't read all the comments. Sorry. :P