From 7a31161e59b34d34917a5c8826d5187fd63e844b Mon Sep 17 00:00:00 2001 From: Alexander Pickering Date: Thu, 17 Aug 2017 20:08:23 -0400 Subject: Made console commands admin-only this was probably a big security bug or something lol --- gamemode/core/database/sv_setup.lua | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'gamemode/core/database') diff --git a/gamemode/core/database/sv_setup.lua b/gamemode/core/database/sv_setup.lua index 743e19a..400473e 100644 --- a/gamemode/core/database/sv_setup.lua +++ b/gamemode/core/database/sv_setup.lua @@ -20,7 +20,7 @@ SELECT PlayerData, MetaData FROM playerdata WHERE SteamID=%.0f ]] local save_player_query = [[ -UPDATE playerdata SET MetaData='%s' PlayerData='%s' WHERE SteamID=%.0f +UPDATE playerdata SET MetaData=%s PlayerData=%s WHERE SteamID=%.0f ]] local function q_fai(err,query) @@ -120,6 +120,7 @@ function sql.SendPlayerToInstance(ply,ls,ll) end concommand.Add("DoQuery",function(ply,cmd,args) + if not ply:IsAdmin() then return end if args[1] == "create" then sql.CreatePlayerTable(ply) elseif args[1] == "get" then -- cgit v1.2.3-70-g09d2