From 70af06de0cb854bf7abf7f71799a8cc8dd6cb239 Mon Sep 17 00:00:00 2001
From: monster860 <mnmaxim@gmail.com>
Date: Mon, 23 May 2016 16:47:33 -0400
Subject: [PATCH] Fix guest pass href exploit

---
 code/game/machinery/guestpass.dm | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/code/game/machinery/guestpass.dm b/code/game/machinery/guestpass.dm
index b63307c3db8..e9229cf315f 100644
--- a/code/game/machinery/guestpass.dm
+++ b/code/game/machinery/guestpass.dm
@@ -124,7 +124,8 @@
 				if (A in accesses)
 					accesses.Remove(A)
 				else
-					accesses.Add(A)
+					if(giver && giver.access && (A in giver.access))
+						accesses.Add(A)
 	if (href_list["action"])
 		switch(href_list["action"])
 			if ("id")