From 8a71c695cc1d4974b468b9aa7df8f6c03b1678e6 Mon Sep 17 00:00:00 2001 From: AffectedArc07 Date: Thu, 4 Jun 2020 14:36:29 +0100 Subject: [PATCH] Patches a hole --- code/modules/admin/player_panel.dm | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/code/modules/admin/player_panel.dm b/code/modules/admin/player_panel.dm index 2a1d03b79aa..0d55840b5b8 100644 --- a/code/modules/admin/player_panel.dm +++ b/code/modules/admin/player_panel.dm @@ -2,6 +2,10 @@ /datum/admins/proc/player_panel_new()//The new one if(!usr.client.holder) return + // This stops the panel from being invoked by mentors who press F7. + if(!check_rights(R_ADMIN)) + message_admins("[key_name_admin(usr)] attempted to invoke player panel without admin rights. If this is a mentor, its a chance they accidentally hit F7. If this is NOT a mentor, there is a high chance an exploit is being used") + return var/dat = "Admin Player Panel" //javascript, the part that does most of the work~