From f1efe2e1d25d8168ea99b234c2b5ec5bd8932970 Mon Sep 17 00:00:00 2001 From: snowleo Date: Wed, 27 Jul 2011 01:00:47 +0200 Subject: Fix for money exploit on trade signs --- Essentials/src/com/earth2me/essentials/signs/SignTrade.java | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/Essentials/src/com/earth2me/essentials/signs/SignTrade.java b/Essentials/src/com/earth2me/essentials/signs/SignTrade.java index 6c0205d34..d9b5f7cc2 100644 --- a/Essentials/src/com/earth2me/essentials/signs/SignTrade.java +++ b/Essentials/src/com/earth2me/essentials/signs/SignTrade.java @@ -98,9 +98,14 @@ public class SignTrade extends EssentialsSign if (split.length == 2 && amountNeeded) { final Double money = getMoney(split[0]); - final Double amount = getDoublePositive(split[1]); + Double amount = getDoublePositive(split[1]); if (money != null && amount != null) { + amount -= amount % money; + if (amount < 1 || money < 1) + { + throw new SignException(Util.i18n("moreThanZero")); + } sign.setLine(index, Util.formatCurrency(money, ess) + ":" + Util.formatCurrency(amount, ess).substring(1)); return; } -- cgit v1.2.3