[s]More security exploit patching

Thanks to Nadrew at byond forums

The full details is that somebody can use the built in version of these verbs to aimbot or find the location of items.

.click 'name-of-mob' and you will click on that mob, meaning you now point in that direction and if its in range, you click directly on it. something that could be automated with auto hotkey.

This still requires a control_freak bypass, but there is a way to do that that is stupid easy that I don't want to detail it.
This commit is contained in:
Kyle Spier-Swenson
2017-02-28 11:44:29 -08:00
committed by GitHub
parent 6dd7152df3
commit 82ab8bcd19
+10 -3
View File
@@ -464,10 +464,17 @@ var/next_mob_id = 0
reset_perspective(null)
unset_machine()
//suppress the .click macro so people can't use it to identify the location of items or aimbot
/mob/verb/ClickSubstitute()
set hidden = 1
//suppress the .click/dblclick macros so people can't use them to identify the location of items or aimbot
/mob/verb/DisClick(argu = null as anything, sec = "" as text, number1 = 0 as num , number2 = 0 as num)
set name = ".click"
set hidden = TRUE
set category = null
return
/mob/verb/DisDblClick(argu = null as anything, sec = "" as text, number1 = 0 as num , number2 = 0 as num)
set name = ".dblclick"
set hidden = TRUE
set category = null
return
/mob/Topic(href, href_list)