mirror of
https://github.com/esx-framework/esx_core.git
synced 2026-09-02 03:08:52 +00:00
Make sure only admin can write to disk #13
This commit is contained in:
+15
-5
@@ -15,17 +15,27 @@ end)
|
||||
|
||||
RegisterServerEvent('esx_skin:responseSaveSkin')
|
||||
AddEventHandler('esx_skin:responseSaveSkin', function(skin)
|
||||
local file = io.open('resources/[esx]/esx_skin/skins.txt', "a")
|
||||
|
||||
file:write(json.encode(skin) .. "\n\n")
|
||||
file:flush()
|
||||
file:close()
|
||||
TriggerEvent('es:getPlayerFromId', source, function(user)
|
||||
TriggerEvent('es:canGroupTarget', user.getGroup(), "admin", function(available)
|
||||
if available then
|
||||
local file = io.open('resources/[esx]/esx_skin/skins.txt', "a")
|
||||
|
||||
file:write(json.encode(skin) .. "\n\n")
|
||||
file:flush()
|
||||
file:close()
|
||||
else
|
||||
print(('esx_skin: %s attempted saving skin to file'):format(user.getIdentifier()))
|
||||
end
|
||||
end)
|
||||
end)
|
||||
|
||||
end)
|
||||
|
||||
ESX.RegisterServerCallback('esx_skin:getPlayerSkin', function(source, cb)
|
||||
local xPlayer = ESX.GetPlayerFromId(source)
|
||||
|
||||
MySQL.Async.fetchAll('SELECT * FROM users WHERE identifier = @identifier', {
|
||||
MySQL.Async.fetchAll('SELECT skin FROM users WHERE identifier = @identifier', {
|
||||
['@identifier'] = xPlayer.identifier
|
||||
}, function(users)
|
||||
local user = users[1]
|
||||
|
||||
Reference in New Issue
Block a user