Skip to content

Conversation

@Maximus7474
Copy link

The security patch made in #53 made one slight oversight when patching the exploit allowing cheaters to open any inventory by simply overriding client code.
This oversight was that temporary stashes don't have their type set to stash but temp, this causes the script to treat it like a person exploiting and will drop the player.

To address this, a simple condition was added to the type check to exclude the case when the found inventory type is temp and the requested one is stash.
Another viable approach would be to alter the creation of temporary stashes to have their type be stash but this would require some changes to the Inventory.Create to adapt the passed variable if it's temp to stash. This shouldn't cause breaking changes at first glance, but it does alter a core system which I don't think is the ideal solution for this hotfix.

…ot cover the type missmatch for temporary stashes
@Maximus7474
Copy link
Author

Fuck fixing the commit message, sorry about that

Copy link
Member

@antond15 antond15 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@antond15 antond15 merged commit 1a779d0 into CommunityOx:main Sep 17, 2025
@Maximus7474 Maximus7474 deleted the fix-oversight-in-53 branch September 17, 2025 10:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants