Merge pull request #15986 from KrissKr0ss/sdql-exploit

Require affirmative input from the admin to run sdql2 verbs
This commit is contained in:
SandPoot
2023-06-25 00:49:07 -03:00
committed by GitHub

View File

@@ -200,6 +200,9 @@
message_admins("<span class='danger'>ERROR: Non-admin [key_name(usr)] attempted to execute a SDQL query!</span>")
log_admin("Non-admin [key_name(usr)] attempted to execute a SDQL query!")
return FALSE
var/prompt = tgui_alert(usr, "Run SDQL2 Query?", "SDQL2", list("Yes", "Cancel"))
if (prompt != "Yes")
return
var/list/results = world.SDQL2_query(query_text, key_name_admin(usr), "[key_name(usr)]")
if(length(results) == 3)
for(var/I in 1 to 3)