From 2f132126e90553a9b17a6bbab797f8bd11abc84a Mon Sep 17 00:00:00 2001 From: errorage Date: Thu, 4 Apr 2013 20:33:23 +0200 Subject: [PATCH] - Makes it impossible for admins to varedit the ckey or key value of client objects. This is to prevent admin log spoofing. --- code/modules/admin/verbs/modifyvariables.dm | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/code/modules/admin/verbs/modifyvariables.dm b/code/modules/admin/verbs/modifyvariables.dm index 49ded54e4c5..2b5d1259083 100644 --- a/code/modules/admin/verbs/modifyvariables.dm +++ b/code/modules/admin/verbs/modifyvariables.dm @@ -275,6 +275,10 @@ var/list/forbidden_varedit_object_types = list( usr << "\red It is forbidden to edit this object's variables." return + if(istype(O, /client) && (param_var_name == "ckey" || param_var_name == "key")) + usr << "\red You cannot edit ckeys on client objects." + return + var/class var/variable var/var_value