Skip to content

Commit 50e9785

Browse files
Security Fix: Export and import command
Fixed that the export and import command of MSync could be executed on clientside, this was not the intended behaviour, these commands were only intended for server side usage
1 parent 4c4b1a0 commit 50e9785

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

lua/msync/server/modules/sv_mbsync.lua

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -639,6 +639,7 @@ MSync.modules[info.ModuleIdentifier].init = function( transaction )
639639
exportActiveBans:start()
640640
end
641641
concommand.Add("msync."..info.ModuleIdentifier..".export", function( ply, cmd, args )
642+
if ply:IsValid() then return end
642643
MSync.modules[info.ModuleIdentifier].exportBansToULX()
643644
end)
644645

@@ -715,6 +716,7 @@ MSync.modules[info.ModuleIdentifier].init = function( transaction )
715716
banTransaction:start()
716717
end
717718
concommand.Add("msync."..info.ModuleIdentifier..".import", function( ply, cmd, args )
719+
if ply:IsValid() then return end
718720
local allservers = false
719721

720722
if args[1] == "true" then

0 commit comments

Comments
 (0)