From bfef3b2c286a35947ebaf90d50ba9154bbc68c26 Mon Sep 17 00:00:00 2001
From: deathride58 <deathride58@users.noreply.github.com>
Date: Thu, 18 Oct 2018 12:26:07 -0400
Subject: [PATCH] fixes an href exploit in labor camp point claim consoles
 (#7653)

---
 code/modules/mining/laborcamp/laborstacker.dm | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/code/modules/mining/laborcamp/laborstacker.dm b/code/modules/mining/laborcamp/laborstacker.dm
index 621a6afe23..dd7f642243 100644
--- a/code/modules/mining/laborcamp/laborstacker.dm
+++ b/code/modules/mining/laborcamp/laborstacker.dm
@@ -99,6 +99,8 @@ GLOBAL_LIST(labor_sheet_values)
 		if("move_shuttle")
 			if(!alone_in_area(get_area(src), usr))
 				to_chat(usr, "<span class='warning'>Prisoners are only allowed to be released while alone.</span>")
+			else if(!check_auth())
+				to_chat(usr, "<span class='warning'>Prisoners are only allowed to be released when they reach their point goal.</span>")
 			else
 				switch(SSshuttle.moveShuttle("laborcamp", "laborcamp_home", TRUE))
 					if(1)