From 28aed34284873aeedb7b5f561cde4e9e45a429b1 Mon Sep 17 00:00:00 2001 From: Jeremy Liberman Date: Tue, 13 May 2014 22:36:16 -0500 Subject: [PATCH] Prevent request forgery exploit in card.dm --- code/game/machinery/computer/card.dm | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/code/game/machinery/computer/card.dm b/code/game/machinery/computer/card.dm index 176606face..78e0b16c64 100644 --- a/code/game/machinery/computer/card.dm +++ b/code/game/machinery/computer/card.dm @@ -250,10 +250,11 @@ P.info += " [get_access_desc(A)]" if ("terminate") - modify.assignment = "Terminated" - modify.access = list() + if (is_authenticated()) + modify.assignment = "Terminated" + modify.access = list() - callHook("terminate_employee", list(modify)) + callHook("terminate_employee", list(modify)) if (modify) modify.name = text("[modify.registered_name]'s ID Card ([modify.assignment])")