qbcore-framework / qb-inventory

Slot Based Inventory System Used With QB-Core :school_satchel:
GNU General Public License v3.0
51 stars 370 forks source link

[Prevention] Timeout-based Client>Server Validation for Inventory Updates #478

Closed TradieKM closed 6 months ago

TradieKM commented 7 months ago

Description

Legitimate client inventory data updates will rely on a validation response from the server when attempted.

Players using internet disruption techniques to dupe items in your server will be kicked instead of data being updated and exploited once connections re-established. Additionally, if the action takes longer than 2 seconds to receive a server response for the transaction ID, player is kicked.

Two logging options can be found in the server event 'inventory:statusBreak'

Checklist