Repository navigation
PLUCK v1.6.1
- Added
provide "pluck"to manifest - Added new
update_slotsexport to update slot UI - Updated
nui:handlerto support custom slot movement hook - Added
set_slot_move_handlerexport for custom slot movement logic - Added
update_slots_from_serverinto content class
Notes on set_slot_move_handler
This hook runs client-side and can be overridden by a malicious client.
That does not create a new exploit path.
A malicious client can already trigger any server event on their own.
If overriding this hook lets someone gain items, money, etc. then the server event is already exploitable.
Validate everything server-side and this hook is safe.