From 9878aeaeb2b59f7bef2eafbadf34b34b2e8e37f3 Mon Sep 17 00:00:00 2001 From: R0adRa93 <42512379+r0adra93@users.noreply.github.com> Date: Tue, 17 Jan 2023 10:01:36 -0500 Subject: [PATCH 1/2] Added PrepForSQL function (#914) performs a check to a string with expected patterns to be matched. --- server/functions.lua | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/server/functions.lua b/server/functions.lua index c472b68..7df5403 100644 --- a/server/functions.lua +++ b/server/functions.lua @@ -414,3 +414,15 @@ end function QBCore.Functions.Notify(source, text, type, length) TriggerClientEvent('QBCore:Notify', source, text, type, length) end + +--- SQL Pattern Matching +function QBCore.Functions.PrepForSQL(source,data,pattern) + local src = source + local player = QBCore.Functions.GetPlayer(src) + local result = string.match(data, pattern) + if not result or string.len(result) ~= string.len(data) then + TriggerEvent('qb-log:server:CreateLog', 'anticheat', 'SQL Injection Attempted', 'red', string.format('%s Attempted a SQL Exploit!', player.PlayerData.license)) + return false + end + return true +end \ No newline at end of file From e6f5bf5ab686cbf53f73871421226480d7877814 Mon Sep 17 00:00:00 2001 From: Charlie Date: Wed, 18 Jan 2023 16:17:15 +0000 Subject: [PATCH 2/2] Remove vehicle keys depdency from core (#920) Co-authored-by: Zerio <54480523+Z3rio@users.noreply.github.com> --- client/events.lua | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/client/events.lua b/client/events.lua index b720f59..60fae33 100644 --- a/client/events.lua +++ b/client/events.lua @@ -160,6 +160,12 @@ end) RegisterNetEvent('QBCore:Client:VehicleInfo', function(info) local plate = QBCore.Functions.GetPlate(info.vehicle) + local hasKeys = true + + if GetResourceState('qb-vehiclekeys') == 'started' then + hasKeys = exports['qb-vehiclekeys']:HasKeys() + end + local data = { vehicle = info.vehicle, seat = info.seat, @@ -167,8 +173,9 @@ RegisterNetEvent('QBCore:Client:VehicleInfo', function(info) plate = plate, driver = GetPedInVehicleSeat(info.vehicle, -1), inseat = GetPedInVehicleSeat(info.vehicle, info.seat), - haskeys = exports['qb-vehiclekeys']:HasKeys(plate) + haskeys = hasKeys } + TriggerEvent('QBCore:Client:'..info.event..'Vehicle', data) end)