adminvote.sma exploit fix (#823)

* Restrict having ".." character sequence in amx_votemap command arguments Fixes exploit on Windows servers that allows executing potentially dangerous console commands * Fix typo containi -> contain
alliedmodders · May 28, 2020 · a5f2b55 · a5f2b55
1 parent 307e714
commit a5f2b55
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/plugins/adminvote.sma b/plugins/adminvote.sma
@@ -238,7 +238,10 @@ public cmdVoteMap(id, level, cid)
 	for (new i = 1; i < argc; ++i)
 	{
 		read_argv(i, g_optionName[g_validMaps], 31)
-
+
+		if (contain(g_optionName[g_validMaps], "..") != -1)
+			continue
+
 		if (is_map_valid(g_optionName[g_validMaps]))
 			g_validMaps++
 	}