mirror of
https://github.com/Bubberstation/Bubberstation.git
synced 2026-08-26 14:39:58 +01:00
adds a permission check to force event's topic
There existed a href exploit that allowed any admin to force an event.
This commit is contained in:
@@ -81,6 +81,7 @@
|
||||
usr << "<span class='danger'>Unfortunatly there were not enough candidates available.</span>"
|
||||
|
||||
else if(href_list["forceevent"])
|
||||
if(!check_rights(R_FUN)) return
|
||||
var/datum/round_event_control/E = locate(href_list["forceevent"]) in SSevent.control
|
||||
if(E)
|
||||
var/datum/round_event/event = E.runEvent()
|
||||
|
||||
Reference in New Issue
Block a user