starred/esx_core
1
0
Fork 0
mirror of https://github.com/esx-framework/esx_core.git synced 2026-08-30 01:38:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

Exploit fixed: money negative values

Browse Source
This commit is contained in:
ElPumpo
2018-04-28 11:34:25 +02:00
parent 160dc9c849
commit 0edf413a99
2 changed files with 53 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/commands.lua
+10 -7
View File
@@ -79,15 +79,15 @@ TriggerEvent('es:addGroupCommand', 'setmoney', 'admin', function(source, args, u
local money_type = args[2]
local money_amount = tonumber(args[3])
local xTarget = ESX.GetPlayerFromId(target)
local xPlayer = ESX.GetPlayerFromId(target)
if target and money_type and money_amount and xTarget ~= nil then
if target and money_type and money_amount and xPlayer ~= nil then
if money_type == 'cash' then
xTarget.setMoney(money_amount)
xPlayer.setMoney(money_amount)
elseif money_type == 'bank' then
xTarget.setAccountMoney('bank', money_amount)
xPlayer.setAccountMoney('bank', money_amount)
elseif money_type == 'black' then
xTarget.setAccountMoney('black_money', money_amount)
xPlayer.setAccountMoney('black_money', money_amount)
else
TriggerClientEvent('chatMessage', _source, "SYSTEM", {255, 0, 0}, "^2" .. money_type .. " ^0 is not a valid money type!")
return
@@ -97,8 +97,11 @@ TriggerEvent('es:addGroupCommand', 'setmoney', 'admin', function(source, args, u
return
end
print('es_extended: ' .. GetPlayerName(source) .. ' just set $' .. money_amount .. ' (' .. money_type .. ') to ' .. xTarget.name)
TriggerClientEvent('esx:showNotification', xTarget.source, _U('money_set', money_amount, money_type))
print('es_extended: ' .. GetPlayerName(source) .. ' just set $' .. money_amount .. ' (' .. money_type .. ') to ' .. xPlayer.name)
if xPlayer.source ~= _source then
TriggerClientEvent('esx:showNotification', xPlayer.source, _U('money_set', money_amount, money_type))
end
end, function(source, args, user)
TriggerClientEvent('chatMessage', source, "SYSTEM", {255, 0, 0}, "Insufficient Permissions.")
end, {help = _U('setmoney'), params = {{name = "id", help = _U('id_param')}, {name = "money type", help = _U('money_type')}, {name = "amount", help = _U('money_amount')}}})