W0LF/DayZ-Epoch
1
0
Fork 0
mirror of https://github.com/EpochModTeam/DayZ-Epoch.git synced 2026-02-12 19:22:56 +03:00
Code Issues Actions Packages Projects Releases Wiki Activity

Add basic security checks to object_killed

Browse Source 
PVDZ_veh_Save = [_obj,"killed"]; could be abused in the same way as
server_deleteObj (42e0047)
This commit is contained in:
ebayShopper
2017-11-13 16:14:22 -05:00
parent 9fd8293246
commit eefcdf2610
5 changed files with 55 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
SQF/dayz_code/actions/player_destroyTent.sqf
View File

@@ -68,7 +68,7 @@ player addMagazine _emptycan;
PVDZ_obj_Destroy = [_objectID,_objectUID,player,_obj,dayz_authKey,false];
publicVariableServer "PVDZ_obj_Destroy";
PVDZ_veh_Save = [_obj, "killed"];
PVDZ_veh_Save = [_obj,"killed",false,false,dayz_playerUID,dayz_authKey];
publicVariableServer "PVDZ_veh_Save";
//Set fire to item

4
SQF/dayz_code/compile/veh_handleKilled.sqf
View File

@@ -4,9 +4,9 @@ _unit = _this select 0;
// ask server to set global damage to 1, save to the hive
if (local _unit) then {
if (isServer) then {
[_unit, "killed"] call server_updateObject;
[_unit,"killed",false,false,"SERVER",dayz_serverKey] call server_updateObject;
} else {
PVDZ_veh_Save = [_unit, "killed"];
PVDZ_veh_Save = [_unit,"killed",false,false,dayz_playerUID,dayz_authKey];
publicVariableServer "PVDZ_veh_Save";
};
};