Filter fields submission by privs.

This commit is contained in:
Agaran 2016-11-26 20:28:17 +01:00 committed by Diego Martínez
parent 33e3fcd15b
commit 877e550787
1 changed files with 5 additions and 0 deletions

View File

@ -100,6 +100,11 @@ end
minetest.register_on_player_receive_fields(function(player, formname, fields)
if formname ~= FORMNAME then return end
local name = player:get_player_name()
if not minetest.check_player_privs(name, { ban=true }) then
minetest.log("warning",
"[xban2] Received fields from unauthorized user: "..name)
return
end
local state = get_state(name)
if fields.player then
local t = minetest.explode_textlist_event(fields.player)