open.mp
open.mp copied to clipboard
Non-streamed trailer can be spoofed
https://github.com/openmultiplayer/open.mp/blob/14c7971d5a53927acfea4eab060b32a4c126f858/Server/Components/Vehicles/vehicle.cpp#L232-L237
This is from driver sync where the player can send valid, but non-streamed trailerid for him and it will be passed without checks.
The solution is probably to check if trailer is streamed for this player at the moment.