Fixed exploit where cheaters can send chat as other people

2011-06-02 23:16:35 -07:00 · 2011-06-02 23:16:35 -07:00 · 5fe2462193
commit 5fe2462193
parent 100d7d10f3
1 changed files with 13 additions and 0 deletions
--- a/TShockAPI/TShock.cs
+++ b/TShockAPI/TShock.cs
@ -212,6 +212,19 @@ namespace TShockAPI
                    Tools.HandleCheater(ply);
                }
            }
+            else if (e.MsgID == 0x19)
+            {
+                byte ply;
+                using (var br = new BinaryReader(new MemoryStream(e.Msg.readBuffer, e.Index, e.Length)))
+                {
+                    ply = br.ReadByte();
+                }
+                if (e.Msg.whoAmI != ply)
+                {
+                    //fuck you faggot
+                    Tools.HandleCheater(ply);
+                }
+            }
        }

        void OnGreetPlayer(int who, HandledEventArgs e)