Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix exploitable net events #167

Merged
merged 1 commit into from
Feb 29, 2024

Conversation

EinS4ckZwiebeln
Copy link
Contributor

Describe Pull request
These events could previously be exploited by bad actors to soft 'freeze' players using the lay animation or force stow them in a vehicle trunk. This PR fixes this issue by checking if the event source is actually close to the targeted player.

Abusing this event is as simple as this:
for i = 1, 999 do TriggerServerEvent("qb-radialmenu:server:BusyResult", false, i, "lay") end

Questions (please complete the following information):

  • Have you personally loaded this code into an updated qbcore project and checked all it's functionality?
    --> YES
  • Does your code fit the style guidelines?
    --> YES
  • Does your PR fit the contribution guidelines?
    --> YES

@GhzGarage GhzGarage merged commit 525b7ac into qbcore-framework:main Feb 29, 2024
2 checks passed
@EinS4ckZwiebeln EinS4ckZwiebeln deleted the patch-01 branch March 19, 2024 08:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants