From fb3200eba82e7fd10aa4dc3d0aed3948aa20ed48 Mon Sep 17 00:00:00 2001
From: Menshin <menshin@users.noreply.github.com>
Date: Sun, 12 Oct 2014 01:39:40 +0200
Subject: [PATCH] * prevent href exploit with stacks multiplier

---
 code/game/objects/items/stacks/stack.dm | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/code/game/objects/items/stacks/stack.dm b/code/game/objects/items/stacks/stack.dm
index 38c95e33cfd..803c9086819 100644
--- a/code/game/objects/items/stacks/stack.dm
+++ b/code/game/objects/items/stacks/stack.dm
@@ -117,7 +117,8 @@
 
 		var/datum/stack_recipe/R = recipes[text2num(href_list["make"])]
 		var/multiplier = text2num(href_list["multiplier"])
-		if (!multiplier) multiplier = 1
+		if (multiplier <= 0) //href protection
+			return
 		if (src.get_amount() < R.req_amount*multiplier)
 			if (R.req_amount*multiplier>1)
 				usr << "<span class='danger'>You haven't got enough [src] to build \the [R.req_amount*multiplier] [R.title]\s!</span>"