3
0
Mirror von https://github.com/IntellectualSites/FastAsyncWorldEdit.git synchronisiert 2024-12-25 02:20:07 +01:00

Fixed gaping huge security flaw.

Dieser Commit ist enthalten in:
Wizjany 2011-09-26 01:32:12 -04:00
Ursprung 9e6a2ccf4d
Commit 23c9a66c80

Datei anzeigen

@ -40,11 +40,11 @@ public class DinnerPermsResolver implements PermissionsResolver {
} }
public boolean hasPermission(String name, String permission) { public boolean hasPermission(String name, String permission) {
Player player = server.getPlayer(name); Player player = server.getPlayerExact(name);
if (player == null) { if (player == null) {
return false; // Permissions are only registered for online players return false; // Permissions are only registered for online players
} }
if ( player.hasPermission("*") || player.hasPermission(permission)) { if (player.hasPermission("*") || player.hasPermission(permission)) {
return true; return true;
} }
int dotPos = permission.lastIndexOf("."); int dotPos = permission.lastIndexOf(".");