Patching util.NetworkStringToID exploit's.

[whatwhatinthe]

Im currently using Namod Prop Protection on my server, a player of mine showed me an older lua script that used "util.NetworkStringToID" to set server properties only a few work, like setting the toolgun to a set tool, enabling and disabling collisions, and stripping weapons from all players.

Im not going to put the script in the post but if you think you know how i can disable player input to util.NetworkStringToID please let me know. Pm me and ill show the full script but heres a small function:

                if string.find(string.lower(v:GetClass()), "weapon") then
                        BADADADA.Start("properties")
                                BADADADA.WriteUInt( util.NetworkStringToID( "remove" ), 32 )
                                BADADADA.WriteEntity( v )

[Rubat]

It's not about util.NetworkStringToID, neither it is "an exploit" with it.

if your prop protection does not prevent users from using the context menu properties on other peoples props, its your own problem. To fix this, return false in this hook: [url]http://wiki.garrysmod.com/page/SANDBOX/CanProperty[/url] if the entity is not owned by the player.

[Shinycow]

[QUOTE=whatwhatinthe;46906698]Im currently using Namod Prop Protection on my server, a player of mine showed me an older lua script that used "util.NetworkStringToID" to set server properties only a few work, like setting the toolgun to a set tool, enabling and disabling collisions, and stripping weapons from all players.

Im not going to put the script in the post but if you think you know how i can disable player input to util.NetworkStringToID please let me know. Pm me and ill show the full script but heres a small function:

                if string.find(string.lower(v:GetClass()), "weapon") then
                        BADADADA.Start("properties")
                                BADADADA.WriteUInt( util.NetworkStringToID( "remove" ), 32 )
                                BADADADA.WriteEntity( v )

[/QUOTE]

[URL="http://pastebin.com/sHmyx1ti"]You talking about this m8?
[/URL]

[Rubat]

[QUOTE=Shinycow;46912740][URL="http://pastebin.com/sHmyx1ti"]You talking about this m8?
[/URL][/QUOTE]

Time to restrict properties to sandbox completely.

[Shinycow]

[QUOTE=Robotboy655;46913007]Time to restrict properties to sandbox completely.[/QUOTE]

wait what

[editline]12th January 2015[/editline]

[URL="https://github.com/garrynewman/garrysmod/commit/9078a4384dc257af174cd017af09582ffd369bd2"]oh wow you actually did it[/URL]

[Rubat]

[QUOTE=Shinycow;46913265]wait what

[editline]12th January 2015[/editline]

[URL="https://github.com/garrynewman/garrysmod/commit/9078a4384dc257af174cd017af09582ffd369bd2"]oh wow you actually did it[/URL][/QUOTE]

I don't want people going on random TTT and Deathrun servers and remove every entity with this.