search

citizenfx / fivem

The source code for the Cfx.re modification frameworks, such as FiveM, RedM and LibertyM, as well as FXServer.
https://cfx.re/
3.41k stars 2.01k forks source link

problem with another hack that is stopping you from playing #2543

Open Pedro-Lucas14 opened 2 months ago

Pedro-Lucas14 commented 2 months ago

What happened?

new social badge that hacks are using a command that doesn't make mistakes to work within the server command list: loadlevel, storymode, replayEditor, localGame. Could you add some way to block it from being used within the server?

Expected result

.

Reproduction steps

command list: loadlevel, storymode, replayEditor, localGame
Screenshot_1 CfxCrashDump_2024_05_15_00_55_23.zip

Importancy

Crash

Area(s)

FiveM, FXServer, ScRT: Lua

Specific version(s)

Fivem 8140 beta.

Additional information

No response

gottfriedleibniz commented 2 months ago

For clarification, what is "are using a command that doesn't make mistakes"? Additionally, what would prevent them from using other commands, e.g. "quit" or "disconnect"?

Pedro-Lucas14 commented 2 months ago

hack asks the other player to use the command: story mode for some reason and badge.

Pedro-Lucas14 commented 2 months ago

This command when used inside the server causes a crash

Pedro-Lucas14 commented 2 months ago

This is a standard command that everyone knows "quit" or "disconnect the other" the hack can give a reason that it has some effect on the cell phone photo because it is called storymode.

tens0rfl0w commented 2 months ago

So, some player (of your server) tells another player (also of your server) to enter this command and then the player that entered this command crashes?

I'm not saying this crash should happen, but this isn't a big problem imo. Just exclude the player that tells other players to enter this command from your server and problem solved?

slashkeyvalue commented 2 months ago

This is a standard command that everyone knows "quit" or "disconnect the other" the hack can give a reason that it has some effect on the cell phone photo because it is called storymode.

Can you add me on discord? i also speak portuguese so i can help you better provide information about the issue you're facing.

it's "key_value" on discord.

Pedro-Lucas14 commented 2 months ago

I accepted on discord

Pedro-Lucas14 commented 2 months ago

What is happening is that the hack discovered this command and it is reaching players on the server to use it and how people and laypeople use it. It will badge the game. These are commands that should not be used within the server.

loadlevel, storymode, replayEditor, localGame

Mathu-lmn commented 2 months ago

Hey, these are console commands (listed here for reference : https://docs.fivem.net/docs/client-manual/console-commands/) What do you expect to change here ? These commands are used in specific cases and can't simply be removed. It's the responsibility of the players to know what command they execute. (not sure to understand what "badging the game" means but I'm guessing some sort of translation error)

Pedro-Lucas14 commented 2 months ago

@Mathu-lmn I didn't mention excluding what it can do and disabling the command while the player is on the server to avoid crashing.

Mathu-lmn commented 2 months ago

So your suggestion is : Disable console commands that makes the player exit the server while he is in a server ? Again, your players shouldn't blindly execute console commands like that so I don't understand the point but maybe someone will 👍🏻