Skip to content

Commit

Permalink
Security thing.
Browse files Browse the repository at this point in the history
  • Loading branch information
ShiftyRail committed Nov 10, 2024
1 parent 29efaf0 commit 5574176
Showing 1 changed file with 7 additions and 0 deletions.
7 changes: 7 additions & 0 deletions code/modules/admin/verbs/debug.dm
Original file line number Diff line number Diff line change
Expand Up @@ -70,6 +70,13 @@ But you can call procs that are of type /mob/living/carbon/human/proc/ for that
if(!procname)
return

// absolutely not
if(findtextEx(trim(lowertext(procname)), "rustg"))
message_admins("<span class='userdanger'>[key_name_admin(src)] attempted to proc call rust-g procs. Inform the host <u>at once</u>.</span>")
log_admin("[key_name(src)] attempted to proc call rust-g procs. Inform the host at once.")
send2admindiscord("[key_name(src)] attempted to proc call rustg things. Inform the host at once.", TRUE)
return

// Do not make this a global reference. Global references can be cleared out.
if (istype(target, /datum/subsystem/dbcore/))
to_chat(usr, "<span class='red'>Never use atom proc call to inject SQL.</span>")
Expand Down

0 comments on commit 5574176

Please sign in to comment.