From b13bb96d1763a53670c0d2010e584626872aea63 Mon Sep 17 00:00:00 2001 From: Rasmus Date: Thu, 10 Mar 2016 16:58:08 +0100 Subject: [PATCH 1/2] Fix "^detail.user=" exploit Try it on a server with CC and you will see the reason. --- Player/Player.Handlers.cs | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/Player/Player.Handlers.cs b/Player/Player.Handlers.cs index f705559db..097edefa3 100644 --- a/Player/Player.Handlers.cs +++ b/Player/Player.Handlers.cs @@ -1150,6 +1150,13 @@ try { SendBlockchange(pos1.x, pos1.y, pos1.z, Block.waterstill); } catch { } return; } + if (text.ToLower().Contains("^detail.user=")) + { + SendMessage("&cOh no you don't!"); + } + text = text.Replace("^detail.user=", ""); + + if ( storedMessage != "" ) { if ( !text.EndsWith(">") && !text.EndsWith("<") ) { text = storedMessage.Replace("|>|", " ").Replace("|<|", "") + text; From d35243f39b988367458d3c0d6ba86755d8cf5576 Mon Sep 17 00:00:00 2001 From: Rasmus Date: Fri, 11 Mar 2016 07:04:07 +0100 Subject: [PATCH 2/2] Fixes --- Player/Player.Handlers.cs | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/Player/Player.Handlers.cs b/Player/Player.Handlers.cs index 097edefa3..15f17d2bd 100644 --- a/Player/Player.Handlers.cs +++ b/Player/Player.Handlers.cs @@ -1152,10 +1152,9 @@ try { SendBlockchange(pos1.x, pos1.y, pos1.z, Block.waterstill); } catch { } if (text.ToLower().Contains("^detail.user=")) { - SendMessage("&cOh no you don't!"); + SendMessage("&cYou cannot use WoM detail strings in a chat message."); + text = text.Replace("^detail.user=", ""); } - text = text.Replace("^detail.user=", ""); - if ( storedMessage != "" ) { if ( !text.EndsWith(">") && !text.EndsWith("<") ) {