[ESX/QB] SQL/Player Handler

[serene pewter]

Showcase - https://www.youtube.com/watch?v=CYahcujV-ew

🔮 Features

• Ability to handle players in session

• Ability to handle offline players

• Ability to handle single player by their ID or if offline by their identifier/citizenid

• Filters for sorting players in list (ESX: money, bank, black_money, QB: money, bank, cyrpto)

• Log System

• Optimized 0.00ms

• Via menu you will be able to change:

  • Players First Name
  • Players Last Name
  • Players Money
  • Players Bank
  • Players Black Money / Crypto
  • Players Group
  • Players Job
  • Players Job Grade

• Money Handler Types:

  • Add Money
  • Set Money
  • Remove Money

QBCore Open Source - https://uniq.tebex.io/package/5743829
QBCore Escrow - https://uniq.tebex.io/package/5743834

ESX Open Source - https://uniq.tebex.io/package/5743828
ESX Escrow - https://uniq.tebex.io/package/5743833

Forum Post - https://forum.cfx.re/t/paid-esx-qb-sql-player-handler/5120349

[wise spear]

can I sql inject servers with this?

[serene pewter]

Nah it has ace perms checks

[wise spear]

so with ace perms I can?

[serene pewter]

If you have ace perm for command and if you fill up right sql query then query will execute normaly

And data passed from client is table so youll hardly fill it up

And regular player shall not be ace allowed for all commands

So in reality there is nothing to worry about 🙂

[spice nymph]

Well, in reality. If, even with ace allowed, you can inject SQL queries there is something to be worried about.

Give a wrong actor the ace permissions and oops, there your database went

[serene pewter]

Esx version executes few querys from table if args are filled up correctly, nothing else can be executed in sql

Qb uses SaveOffline function

And since everything in qb core goes trough aces, if wrong player is aced your server is fcked up already