Re: more questions

• Date: Sat, 22 Feb 1997 17:05:04 PST
• From:
  Brack <slayer@kaiwan.com>
• Content-Type: text/plain; charset="us-ascii"
• In-Reply-To: <199702230046.TAA00296@mail.datasys.net>

At 04:51 PM 2/22/97 PST, Mike Moore wrote:
>A more robust approach would be:
>
>if ($perm_utils:controls (caller_perms(), this) && (player == this.owner))
>
>This one checks to see that the owner of the verb calling this:moveto()
>has permissions for this object (i.e. the owner or a wizard) and that the
>task that resulted in the verbcall was started by this object's owner.
>
>That way, my malicious :tell verb would fail to move the object.
>
True, but then the editor couldn't move you in either.
($generic_editor:suck_in is owned by hacker.) You could check to see if an
editor is the one moving you, but then someone could just make their own
child and use it to move you.
Maybe you can go through all frames of callers and make sure that
frame[5]==player... although that might not work either.

• Re: more questions
• From: Chris Williams <psion@mv.mv.com>

• Re: more questions
• From: "Mike Moore" <mike@datasys.net>

• Prev: Re: more questions
• Next: Re: more questions
• Index: MOO-cows
• Thread: MOO-cows