From 41dcfc1cda1667a6f02be25e014b4931ced05334 Mon Sep 17 00:00:00 2001
From: Andyyy7666 <86536434+Andyyy7666@users.noreply.github.com>
Date: Sat, 25 Dec 2021 00:07:43 +0100
Subject: [PATCH] Update commands.lua

Fixed vulnerability where modders would be able to change the aop, they will now be kicked :)
---
 ND_Core/source/server/commands.lua | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/ND_Core/source/server/commands.lua b/ND_Core/source/server/commands.lua
index 899a63b..831d66f 100644
--- a/ND_Core/source/server/commands.lua
+++ b/ND_Core/source/server/commands.lua
@@ -10,8 +10,13 @@ local aop = "Unknown" -- aop unknown if it's not set.
 -- Aop command events
 RegisterNetEvent("registerAop")
 AddEventHandler("registerAop", function(aopRegistered)
-    aop = aopRegistered
-    TriggerClientEvent("setAop", -1, aop)
+    local player = source
+    if IsRolePresent(player, "ADMIN") then
+        aop = aopRegistered
+        TriggerClientEvent("setAop", -1, aop)
+    else
+        DropPlayer(player, "Tried to use a mod menu to change the aop.")
+    end
 end)
 RegisterNetEvent("getAop")
 AddEventHandler("getAop", function()