Garrus2142 / Slashers

Garrysmod's Gamemode
21 stars 24 forks source link

Stamina exploit #56

Closed end360 closed 4 years ago

end360 commented 4 years ago

The stamina system is implemented on the client, which could allow a cheater to have infinite stamina. The net message in the stamina module accepts any string and has no validation which could allow a cheater to play/stop any sound(s) they want from their player. Since there's just the one sound it'd make sense to remove the player input and replace it with the breathing sound. A better solution would be to make the stamina system done via SetupMove and have the server decide when to play sounds/run out of stamina, not the client.