ijwtb / nocollide-world Goto Github PK
View Code? Open in Web Editor NEWOriginal tool by Panthera Tigris (http://steamcommunity.com/sharedfiles/filedetails/?id=114297900).
Original tool by Panthera Tigris (http://steamcommunity.com/sharedfiles/filedetails/?id=114297900).
From the Workshop page:
Dupe stealing/removing/unfreezing exploit
Hi,It was brought to my attention that your tool allows players to essentially assume ownership over others' entities regardless of prop protection.
In your script, you aren't doing any checks with the "Nocollide within Sphere/Box" options (#6, 7, 8, and 9) to see if the player using the tool actually owns the entities before applying the constraint between them.
Typically you would check if the server has the Common Prop Protection Interface (CPPI) and that the entities have the ENTITY:CPPICanTool method implemented, or just do a normal hook.Run( "CanTool", ... ) call and see if the server allows or prevents the action.
Without the checks, players are currently able to constrain other players' entities to their own, thus allowing them to use Advanced Duplicator 1 and the generic Duplicator tool to steal the entire contraption. Similarly, since the entities are now constrained, players can press R to unfreeze the dupe, breaking it entirely and potentially crashing the server. Players can also undo their entities and coincidentally delete the constrained entities that don't belond to them.
This is a serious concern for any building server, and I strongly urge you to patch this exploit.
Dupe stealing/removing/unfreezing exploit
Hi,It was brought to my attention that your tool allows players to essentially assume ownership over others' entities regardless of prop protection.
In your script, you aren't doing any checks with the "Nocollide within Sphere/Box" options (#6, 7, 8, and 9) to see if the player using the tool actually owns the entities before applying the constraint between them.
Typically you would check if the server has the Common Prop Protection Interface (CPPI) and that the entities have the ENTITY:CPPICanTool method implemented, or just do a normal hook.Run( "CanTool", ... ) call and see if the server allows or prevents the action.
Without the checks, players are currently able to constrain other players' entities to their own, thus allowing them to use Advanced Duplicator 1 and the generic Duplicator tool to steal the entire contraption. Similarly, since the entities are now constrained, players can press R to unfreeze the dupe, breaking it entirely and potentially crashing the server. Players can also undo their entities and coincidentally delete the constrained entities that don't belond to them.
This is a serious concern for any building server, and I strongly urge you to patch this exploit.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.