[Security] Only allow unlimited shop creation if player is allowed
authorGabriel Pérez-Cerezo <gabriel@gpcf.eu>
Fri, 6 Mar 2020 22:24:34 +0000 (23:24 +0100)
committerGabriel Pérez-Cerezo <gabriel@gpcf.eu>
Fri, 6 Mar 2020 22:24:34 +0000 (23:24 +0100)
commit83060e9e85be790f64fcf51def1f024699a46d2d
tree2f91f7ab71e330ce784630daf0bcee29efa9b750
parente98a3debe01248b290a65c083f0f83cae323f9bc
[Security] Only allow unlimited shop creation if player is allowed

The previous code assumed that the limit toggle button cannot be
pressed by non-creative players. However, this is easily possible with
a specially crafted client, that submits this field. The fix checks if
the player really has creative before switching a shop to unlimited
mode.
init.lua