shikix/GS13NG
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fixes an href exploit in labor camp point claim consoles (#7653)

Browse Source
This commit is contained in:
deathride58
2018-10-18 12:26:07 -04:00
committed by kevinz000
parent 88e2c98742
commit bfef3b2c28
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
code/modules/mining/laborcamp/laborstacker.dm
View File

@@ -99,6 +99,8 @@ GLOBAL_LIST(labor_sheet_values)
if("move_shuttle")
if(!alone_in_area(get_area(src), usr))
to_chat(usr, "<span class='warning'>Prisoners are only allowed to be released while alone.</span>")
else if(!check_auth())
to_chat(usr, "<span class='warning'>Prisoners are only allowed to be released when they reach their point goal.</span>")
else
switch(SSshuttle.moveShuttle("laborcamp", "laborcamp_home", TRUE))
if(1)