diff options
| author | Alexander Pickering <alexandermpickering@gmail.com> | 2017-08-17 20:08:23 -0400 |
|---|---|---|
| committer | Alexander Pickering <alexandermpickering@gmail.com> | 2017-08-17 20:08:23 -0400 |
| commit | 7a31161e59b34d34917a5c8826d5187fd63e844b (patch) | |
| tree | 85694d3dc3429f2a3c2183f03b5e7c7a818958b3 /gamemode/core/database | |
| parent | fcffbc1ff27a7cb28bab85b223be7060c481bf8b (diff) | |
| download | artery-7a31161e59b34d34917a5c8826d5187fd63e844b.tar.gz artery-7a31161e59b34d34917a5c8826d5187fd63e844b.tar.bz2 artery-7a31161e59b34d34917a5c8826d5187fd63e844b.zip | |
Made console commands admin-only
this was probably a big security bug or something lol
Diffstat (limited to 'gamemode/core/database')
| -rw-r--r-- | gamemode/core/database/sv_setup.lua | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/gamemode/core/database/sv_setup.lua b/gamemode/core/database/sv_setup.lua index 743e19a..400473e 100644 --- a/gamemode/core/database/sv_setup.lua +++ b/gamemode/core/database/sv_setup.lua @@ -20,7 +20,7 @@ SELECT PlayerData, MetaData FROM playerdata WHERE SteamID=%.0f ]] local save_player_query = [[ -UPDATE playerdata SET MetaData='%s' PlayerData='%s' WHERE SteamID=%.0f +UPDATE playerdata SET MetaData=%s PlayerData=%s WHERE SteamID=%.0f ]] local function q_fai(err,query) @@ -120,6 +120,7 @@ function sql.SendPlayerToInstance(ply,ls,ll) end concommand.Add("DoQuery",function(ply,cmd,args) + if not ply:IsAdmin() then return end if args[1] == "create" then sql.CreatePlayerTable(ply) elseif args[1] == "get" then |