themaster1970sf/TShock
1
0
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions

Exploit prevention. Previously, the server trusted the client's tileType, now we check it ourselves.

Browse source
This commit is contained in:
Lucas Nicodemus 2012-01-21 00:48:24 -07:00
parent c7871cd88f
commit 39c0007c84
1 changed files with 1 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
TShockAPI/TShock.cs
View file

@ -1094,7 +1094,7 @@ namespace TShockAPI
{ {
foreach (Point p in player.IceTiles) foreach (Point p in player.IceTiles)
{ {
if (p.X == tileX && p.Y == tileY && (tileType == 0 || tileType == 127)) if (p.X == tileX && p.Y == tileY && (Main.tile[p.X, p.Y].type == 0 || Main.tile[p.X, p.Y].type == 127))
{ {
player.IceTiles.Remove(p); player.IceTiles.Remove(p);
return false; return false;
@ -1106,7 +1106,6 @@ namespace TShockAPI
if (TShock.Config.AllowIce && actionType == 1 && tileType == 127) if (TShock.Config.AllowIce && actionType == 1 && tileType == 127)
{ {
player.IceTiles.Add(new Point(tileX, tileY)); player.IceTiles.Add(new Point(tileX, tileY));
return false; return false;
} }