From 4495f4c8ed9e3e7ca82e504bcbd03d4a9d5fe777 Mon Sep 17 00:00:00 2001
From: GinjaNinja32 <ginjaninja32@gmail.com>
Date: Sun, 8 Feb 2015 19:58:28 +0000
Subject: [PATCH] Fixes possible href exploit with APCs

---
 code/modules/power/apc.dm | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/code/modules/power/apc.dm b/code/modules/power/apc.dm
index dc019ccaec..5a1dcc5b72 100644
--- a/code/modules/power/apc.dm
+++ b/code/modules/power/apc.dm
@@ -888,6 +888,11 @@
 	if(!can_use(usr, 1))
 		return 1
 
+	if(!istype(usr, /mob/living/silicon) && locked)
+		// Shouldn't happen, this is here to prevent href exploits
+		usr << "You must unlock the panel to use this!"
+		return 1
+
 	if (href_list["lock"])
 		coverlocked = !coverlocked