MBU-Team / OpenMBU

A reverse engineered version of Marble Blast Ultra from Xbox 360
156 stars 20 forks source link

[BUG] spawnStupidMarble serverCmd not protected #182

Closed maxymax13 closed 11 months ago

maxymax13 commented 1 year ago

Is there an existing issue for this?

Version

Beta 1.16

OS

Windows 10

Description

We were playing the game and noticed that the spawnStupidMarble command has no kind of check for admin/host, so any player can spam commandToServer('spawnStupidMarble',1); as many times as they want until the host crashes. image

Log File

No response

Steps to reproduce

  1. Join a multiplayer game
  2. commandToServer('spawnStupidMarble',1);

Expected Behavior

Only the host should be able to run this command

Actual Behavior

Anyone can run this command

Reproduction frequency

No response

Additional Information

No response

NeoTheLynx commented 1 year ago

This should be fixed in the next release.