From 2459aa540151e752dbf676b6e466f0b1c45a10e8 Mon Sep 17 00:00:00 2001 From: scatterflower Date: Sun, 10 Jul 2022 10:25:19 -0500 Subject: [PATCH] Don't allow exploit to change background --- core/src/packet/packet_ms.cpp | 1 + 1 file changed, 1 insertion(+) diff --git a/core/src/packet/packet_ms.cpp b/core/src/packet/packet_ms.cpp index dbdbda2..f174226 100644 --- a/core/src/packet/packet_ms.cpp +++ b/core/src/packet/packet_ms.cpp @@ -159,6 +159,7 @@ AOPacket *PacketMS::validateIcPacket(AOClient &client) const l_args.append(l_incoming_args[5].toString()); if (client.m_pos != l_incoming_args[5].toString()) { client.m_pos = l_incoming_args[5].toString(); + client.m_pos.replace("../", ""); client.updateEvidenceList(client.getServer()->getAreaById(client.m_current_area)); }