swg-source/client-tools
1
0
Fork 0
mirror of https://github.com/SWG-Source/client-tools.git synced 2026-08-27 16:56:39 -04:00
Code Issues Projects Releases Wiki Activity

Fix Exploitable getCSR() checks

Browse Source
This commit is contained in:
AconiteX
2021-06-17 03:31:50 -04:00
parent b3d51a77b8
commit 23c8f3430a
4 changed files with 36 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/engine/client/library/clientGame/src/shared/command/CommandCppFuncs.cpp
+17 -17
View File
@@ -1549,7 +1549,7 @@ void CommandCppFuncsNamespace::commandFuncNotepad(Command const & , NetworkId co
void CommandCppFuncsNamespace::commandFuncSetScale (Command const & , NetworkId const & , NetworkId const & target, Unicode::String const & params)
{
if(ConfigClientGame::getCSR())
if(Game::getPlayerObject()->isAdmin())
{
if(target == NetworkId::cms_invalid)
{
@@ -1568,7 +1568,7 @@ void CommandCppFuncsNamespace::commandFuncSetScale (Command const & , NetworkId
void CommandCppFuncsNamespace::commandFuncSetYaw (Command const & , NetworkId const & , NetworkId const & target, Unicode::String const & params)
{
if(ConfigClientGame::getCSR())
if(Game::getPlayerObject()->isAdmin())
{
if(target == NetworkId::cms_invalid)
{
@@ -1587,7 +1587,7 @@ void CommandCppFuncsNamespace::commandFuncSetYaw (Command const & , NetworkId co
void CommandCppFuncsNamespace::commandFuncHideMe (Command const &, NetworkId const &, NetworkId const &, Unicode::String const &params)
{
if (ConfigClientGame::getCSR())
if (Game::getPlayerObject()->isAdmin())
{
bool hide = false;
@@ -1624,7 +1624,7 @@ void CommandCppFuncsNamespace::commandFuncHideMe (Command const &, NetworkId con
void CommandCppFuncsNamespace::commandFuncReloadAdminTable (Command const & , NetworkId const & , NetworkId const & , Unicode::String const & )
{
if(ConfigClientGame::getCSR())
if(Game::getPlayerObject()->isAdmin())
{
const std::string reloadCommand = "/remote server reloadAdminTable";
IGNORE_RETURN(CuiMessageQueueManager::executeCommandByString(reloadCommand, true));
@@ -1635,7 +1635,7 @@ void CommandCppFuncsNamespace::commandFuncReloadAdminTable (Command const & , Ne
void CommandCppFuncsNamespace::commandFuncSkills (Command const & , NetworkId const & , NetworkId const & target, Unicode::String const & )
{
if(ConfigClientGame::getCSR())
if(Game::getPlayerObject()->isAdmin())
{
if(target == NetworkId::cms_invalid)
{
@@ -1654,7 +1654,7 @@ void CommandCppFuncsNamespace::commandFuncSkills (Command const & , NetworkId co
void CommandCppFuncsNamespace::commandFuncSpawn (Command const & , NetworkId const & , NetworkId const & , Unicode::String const & params)
{
if(ConfigClientGame::getCSR())
if(Game::getPlayerObject()->isAdmin())
{
const std::string spawnCommand = "/remote object spawn ";
@@ -1670,7 +1670,7 @@ void CommandCppFuncsNamespace::commandFuncSpawn (Command const & , NetworkId con
void CommandCppFuncsNamespace::commandFuncDestroy (Command const & , NetworkId const & , NetworkId const & target, Unicode::String const & )
{
if(ConfigClientGame::getCSR())
if(Game::getPlayerObject()->isAdmin())
{
if(target == NetworkId::cms_invalid)
{
@@ -1689,7 +1689,7 @@ void CommandCppFuncsNamespace::commandFuncDestroy (Command const & , NetworkId c
void CommandCppFuncsNamespace::commandFuncEditBank (Command const & , NetworkId const & , NetworkId const & target, Unicode::String const & )
{
if (ConfigClientGame::getCSR())
if (Game::getPlayerObject()->isAdmin())
{
if (target == NetworkId::cms_invalid)
{
@@ -1713,7 +1713,7 @@ void CommandCppFuncsNamespace::commandFuncEditBank (Command const & , NetworkId
void CommandCppFuncsNamespace::commandFuncEditInventory (Command const & , NetworkId const & , NetworkId const & target, Unicode::String const & )
{
if (ConfigClientGame::getCSR())
if (Game::getPlayerObject()->isAdmin())
{
if (target == NetworkId::cms_invalid)
{
@@ -1737,7 +1737,7 @@ void CommandCppFuncsNamespace::commandFuncEditInventory (Command const & , Netwo
void CommandCppFuncsNamespace::commandFuncEditDatapad (Command const & , NetworkId const & , NetworkId const & target, Unicode::String const & )
{
if (ConfigClientGame::getCSR())
if (Game::getPlayerObject()->isAdmin())
{
if (target == NetworkId::cms_invalid)
{
@@ -1760,7 +1760,7 @@ void CommandCppFuncsNamespace::commandFuncEditDatapad (Command const & , Network
//----------------------------------------------------------------------
void CommandCppFuncsNamespace::commandFuncExamineObjVars (Command const & , NetworkId const & , NetworkId const & target, Unicode::String const & params)
{
if(ConfigClientGame::getCSR())
if(Game::getPlayerObject()->isAdmin())
{
const std::string objvarCommand = "/remote objvar list ";
@@ -1775,7 +1775,7 @@ void CommandCppFuncsNamespace::commandFuncExamineObjVars (Command const & , Netw
void CommandCppFuncsNamespace::commandFuncRenamePlayer (Command const & , NetworkId const & , NetworkId const & target, Unicode::String const & params)
{
if(ConfigClientGame::getCSR())
if(Game::getPlayerObject()->isAdmin())
{
if(target == NetworkId::cms_invalid)
{
@@ -1803,7 +1803,7 @@ void CommandCppFuncsNamespace::commandFuncRenamePlayer (Command const & ,
void CommandCppFuncsNamespace::commandFuncDraw (Command const & , NetworkId const & , NetworkId const & , Unicode::String const & params)
{
if(ConfigClientGame::getCSR())
if(Game::getPlayerObject()->isAdmin())
{
size_t pos = 0;
int value = nextIntParm (params, pos);
@@ -1815,7 +1815,7 @@ void CommandCppFuncsNamespace::commandFuncDraw (Command const & , NetworkId cons
void CommandCppFuncsNamespace::commandFuncUiDebugExamine (Command const & , NetworkId const & , NetworkId const & , Unicode::String const & params)
{
if(ConfigClientGame::getCSR())
if(Game::getPlayerObject()->isAdmin())
{
const std::string debugExamineCommand = "/ui debugexamine ";
std::string command = debugExamineCommand + Unicode::wideToUTF8(params);
@@ -1827,7 +1827,7 @@ void CommandCppFuncsNamespace::commandFuncUiDebugExamine (Command const & , Netw
void CommandCppFuncsNamespace::commandFuncUnload (Command const & , NetworkId const & , NetworkId const & target, Unicode::String const & )
{
if(ConfigClientGame::getCSR())
if(Game::getPlayerObject()->isAdmin())
{
if(target == NetworkId::cms_invalid)
{
@@ -1854,7 +1854,7 @@ void CommandCppFuncsNamespace::commandFuncEmptyMail(Command const & , NetworkId
void CommandCppFuncsNamespace::commandFuncEditBiography(Command const & , NetworkId const & , NetworkId const & target, Unicode::String const & str)
{
if(ConfigClientGame::getCSR())
if(Game::getPlayerObject()->isAdmin())
{
NetworkId editTarget(target);
@@ -2012,7 +2012,7 @@ void CommandCppFuncsNamespace::commandFuncTarget (Command const & , NetworkId co
void CommandCppFuncsNamespace::commandFuncTargetPilot(Command const &, NetworkId const &, NetworkId const &target, Unicode::String const &)
{
if (ConfigClientGame::getCSR())
if (Game::getPlayerObject()->isAdmin())
{
CreatureObject * const player = Game::getPlayerCreature();
if (player)
src/engine/client/library/clientGame/src/shared/core/ConfigClientGame.cpp
+12
View File
@@ -868,6 +868,18 @@ float ConfigClientGame::getConnectionTimeout()
//-----------------------------------------------------------------------
/**
*>>>>>>>> WARNING READ THIS <<<<<<<<<<
*
* This is not a secure or reliable way to validate who is/is not a CSR.
* This only checks for the obfuscation code in the client-side config
* which anyone can add. This should ONLY be used to flag for the command
* parser that admin commands are available.
*
* If you need to validate if someone is/is not a CSR (isGod) then you
* should use Game::getPlayerObject->isAdmin() only!! But MORE importantly,
* anything being done should also be validated server-side!!!
*/
bool ConfigClientGame::getCSR()
{
return ms_0fd345d9;