Fix security issue

This commit is contained in:
Jack
2021-11-28 17:10:27 +00:00
committed by GitHub
parent f1004beb7b
commit 7c3d1bc973
+7 -4
View File
@@ -9,9 +9,9 @@ function QBCore.Player.Login(source, citizenid, newData)
local src = source
if src then
if citizenid then
local result = exports.oxmysql:executeSync('SELECT * FROM players WHERE citizenid = ?', { citizenid })
local PlayerData = result[1]
if PlayerData then
local license = QBCore.Functions.GetIdentifier(src, 'license')
local PlayerData = exports.oxmysql:singleSync('SELECT * FROM players where citizenid = ?', { citizenid })
if PlayerData and license == PlayerData.license then
PlayerData.money = json.decode(PlayerData.money)
PlayerData.job = json.decode(PlayerData.job)
PlayerData.position = json.decode(PlayerData.position)
@@ -22,8 +22,11 @@ function QBCore.Player.Login(source, citizenid, newData)
else
PlayerData.gang = {}
end
QBCore.Player.CheckPlayerData(src, PlayerData)
else
DropPlayer(src, 'You Have Been Kicked For Exploitation')
TriggerEvent('qb-log:server:CreateLog', 'anticheat', 'Anti-Cheat', 'white', GetPlayerName(src) .. ' Has Been Dropped For Character Joining Exploit', false)
end
QBCore.Player.CheckPlayerData(src, PlayerData)
else
QBCore.Player.CheckPlayerData(src, newData)
end