[Brazukas_br]

where the points are saved and how to manually delete them

[Eyedol]

I found an exploit in this plugin, I'm sure of it.

I don't know if someone else has happened to it, but for some strange reason after using this plugin for a while, this allows any user without flags or anything to use cheat codes such as "give, z_spawn, z_spawn_old" in the console.
to check it I have used only this plugin and nothing else apart from the sourcemod base plugins obviously.

[Psyk0tik]

Originally Posted by Eyedol I found an exploit in this plugin, I'm sure of it. I don't know if someone else has happened to it, but for some strange reason after using this plugin for a while, this allows any user without flags or anything to use cheat codes such as "give, z_spawn, z_spawn_old" in the console. to check it I have used only this plugin and nothing else apart from the sourcemod base plugins obviously.

That's because this plugin strips the FCVAR_CHEAT flag from those commands and never puts them back. Anyone can join your server and use those commands while this plugin is running.

[Eyedol]

Originally Posted by Crasher_3637 That's because this plugin strips the FCVAR_CHEAT flag from those commands and never puts them back. Anyone can join your server and use those commands while this plugin is running.

this is really bad , i like this plugin, hopefully someone can fix it, anyway thanks for the answer.

[Psyk0tik]

Originally Posted by Eyedol this is really bad :( , i like this plugin, hopefully someone can fix it, anyway thanks for the answer.

Untested but it should properly allow buyers to use cheat commands without giving every player access all the time.

[matrixmark]

Originally Posted by Eyedol I found an exploit in this plugin, I'm sure of it. I don't know if someone else has happened to it, but for some strange reason after using this plugin for a while, this allows any user without flags or anything to use cheat codes such as "give, z_spawn, z_spawn_old" in the console. to check it I have used only this plugin and nothing else apart from the sourcemod base plugins obviously.

Thanks for posting, I've also been using it over multiple servers. Very bad lol. I have removed it now.

[pan0s]

Originally Posted by ryxzxz Hello,I found some issue. This will cause points_limit_tanks and points_limit_witches work incorrect. Finally, g_iNoOfTanks and g_iNoOfWitches should be reset when RoundStart or RoundEnd.

Thanks for your report, I have fixed it.

Originally Posted by Crasher_3637 Untested but it should properly allow buyers to use cheat commands without giving every player access all the time.

Thanks for helping fix the problem.

[ryxzxz]

nice!

[matrixmark]

Originally Posted by pan0s Thanks for your report, I have fixed it. Thanks for helping fix the problem.

Thanks for the fix Just a quick question if I may. Would it be possible to keep the menu open once an item has been purchased. Just on some of our servers it gets a bit spammy when everyone is typing buy into the chat (yes i know they can bind a key but most dont) anyways thanks again

[VYRNACH_GAMING]

I'm still getting exploit/bug where anyone is able to use the give and z_spawn commands after someone buys something from the shop. Anyone has managed to resolved it?