Fixed gaping huge security flaw.

This commit is contained in:
Wizjany 2011-09-26 01:32:12 -04:00
parent 9e6a2ccf4d
commit 23c9a66c80

View File

@ -40,11 +40,11 @@ public class DinnerPermsResolver implements PermissionsResolver {
} }
public boolean hasPermission(String name, String permission) { public boolean hasPermission(String name, String permission) {
Player player = server.getPlayer(name); Player player = server.getPlayerExact(name);
if (player == null) { if (player == null) {
return false; // Permissions are only registered for online players return false; // Permissions are only registered for online players
} }
if ( player.hasPermission("*") || player.hasPermission(permission)) { if (player.hasPermission("*") || player.hasPermission(permission)) {
return true; return true;
} }
int dotPos = permission.lastIndexOf("."); int dotPos = permission.lastIndexOf(".");