From 924fbc78f755bcd2917334bd28519bb614babac0 Mon Sep 17 00:00:00 2001 From: cheapie Date: Sun, 26 Jul 2026 10:33:26 -0500 Subject: Check controller/dispatcher protection when connecting call buttons/kiosks This prevents players from reaching locked floors by connecting their own call buttons --- dbdkiosk.lua | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'dbdkiosk.lua') diff --git a/dbdkiosk.lua b/dbdkiosk.lua index 4d15403..4193cbf 100644 --- a/dbdkiosk.lua +++ b/dbdkiosk.lua @@ -77,6 +77,11 @@ function celevator.dbdkiosk.handlefields(pos,_,fields,player) local carinfo = core.deserialize(celevator.storage:get_string(string.format("car%d",fields.carid))) if not carinfo then return end if not (carinfo.dispatcherpos and celevator.dispatcher.isdispatcher(carinfo.dispatcherpos)) then return end + if core.is_protected(carinfo.dispatcherpos,name) and not core.check_player_privs(name,{protection_bypass=true}) then + core.record_protection_violation(carinfo.dispatcherpos,name) + core.chat_send_player(name,S("Can't connect to a dispatcher you don't have access to.")) + return + end local dmem = core.deserialize(core.get_meta(carinfo.dispatcherpos):get_string("mem")) if not dmem then return end local floornames = dmem.params.floornames -- cgit v1.2.3