OnRconCommand

using System.Linq;
using System;
using System.Collections.Generic;
using System.Net;
using Newtonsoft.Json;
using Oxide.Core;

namespace Oxide.Plugins
{
    [Info("Rcon Command Guard", "RustPluginGenerator", "1.0.0")]
    [Description("Blocks and logs destructive RCON commands, optionally restricting them to trusted IPs")]
    public class RconCommandGuard : RustPlugin
    {
        private class PluginConfig
        {
            [JsonProperty("Blocked commands")]
            public List<string> BlockedCommands = new List<string> { "quit", "restart", "kill", "ban", "kick" };

            [JsonProperty("Trusted IPs (empty disables IP check)")]
            public List<string> TrustedIps = new List<string>();

            [JsonProperty("Log all RCON commands")]
            public bool LogAll = false;
        }

        private PluginConfig config;

        protected override void LoadDefaultConfig() => config = new PluginConfig();

        protected override void LoadConfig()
        {
            base.LoadConfig();
            try
            {
                config = Config.ReadObject<PluginConfig>();
                if (config == null) throw new Exception();
            }
            catch
            {
                PrintWarning("Configuration file is invalid, using defaults");
                LoadDefaultConfig();
            }
            SaveConfig();
        }

        protected override void SaveConfig() => Config.WriteObject(config);

        protected override void LoadDefaultMessages()
        {
            lang.RegisterMessages(new Dictionary<string, string>
            {
                ["Blocked"] = "[RCON] Command '{0}' from {1} was blocked by the server.",
                ["Logged"] = "[RCON] {0} ran '{1}'"
            }, this);
        }

        private string Msg(string key, string userId = null, params object[] args) =>
            string.Format(lang.GetMessage(key, this, userId), args);

        private object OnRconCommand(IPEndPoint userEndPoint, string command, string[] args)
        {
            if (userEndPoint == null || string.IsNullOrEmpty(command)) return null;
            if (args == null) args = new string[0];

            string address = userEndPoint.Address != null ? userEndPoint.Address.ToString() : "unknown";
            string joined = args.Length > 0 ? command + " " + string.Join(" ", args) : command;

            bool blocked = config.BlockedCommands.Contains(command);

            if (blocked && config.TrustedIps.Count > 0 && !config.TrustedIps.Contains(address))
            {
                PrintWarning(Msg("Blocked", null, command, address));
                return true;
            }

            if (blocked && config.TrustedIps.Count == 0)
            {
                PrintWarning(Msg("Blocked", null, command, address));
                return true;
            }

            if (config.LogAll)
            {
                PrintWarning(Msg("Logged", null, address, joined));
            }

            return null;
        }
    }
}