rigbot2/skript-db
1
0
Fork 0
forked from Limework/skript-db
Code Pull Requests Activity

Skript 2.8+ unsafe Fix

Browse Source 
Fix for: Make sure to use "execute unsafe" for the time being instead of "execute" for Skript 2.8+ to work, handle SQL injection protection on your own (as execute unsafe bypasses it)
This commit is contained in:
rigbot2 2025-02-22 02:44:20 +00:00
parent 5a81846081
commit 1dc6410667
1 changed files with 72 additions and 81 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

111
src/main/java/com/btk5h/skriptdb/SkriptUtil.java
View File

@ -1,94 +1,85 @@
package com.btk5h.skriptdb;
import ch.njol.skript.Skript;
import ch.njol.skript.lang.Expression;
import ch.njol.skript.lang.VariableString;
import java.lang.reflect.Field;
import java.util.Arrays;
import java.util.Optional;
import org.bukkit.event.Event;
import ch.njol.skript.ScriptLoader;
import ch.njol.skript.Skript;
import ch.njol.skript.lang.Expression;
import ch.njol.skript.lang.VariableString;
import ch.njol.skript.lang.parser.ParserInstance;
public class SkriptUtil {
private static final Field STRING;
private static final Field EXPR;
static {
STRING = tryGetOldStringField()
.or(() -> tryGetNewStringField())
.orElseGet(() -> {
Skript.error("Skript's 'string' field could not be resolved.");
return null;
});
Field stringField = null;
Field exprField = null;
String[] possibleStringFields = {"string", "stringValue", "rawString"};
for (String fieldName : possibleStringFields) {
try {
stringField = VariableString.class.getDeclaredField(fieldName);
stringField.setAccessible(true);
break;
} catch (NoSuchFieldException ignored) {}
}
if (stringField == null) {
for (Field field : VariableString.class.getDeclaredFields()) {
if (field.getType().isArray() && field.getType().getComponentType() == Object.class) {
try {
field.setAccessible(true);
stringField = field;
break;
} catch (SecurityException ignored) {}
}
}
}
Field f = null;
try {
Optional<Class<?>> expressionInfo = Arrays.stream(VariableString.class.getDeclaredClasses())
.filter(cls -> cls.getSimpleName().equals("ExpressionInfo"))
.findFirst();
if (expressionInfo.isPresent()) {
Class<?> expressionInfoClass = expressionInfo.get();
f = expressionInfoClass.getDeclaredField("expr");
f.setAccessible(true);
} else {
Skript.error("Skript's 'ExpressionInfo' class could not be resolved.");
}
try {
exprField = expressionInfoClass.getDeclaredField("expr");
exprField.setAccessible(true);
} catch (NoSuchFieldException e) {
e.printStackTrace();
Skript.error("Skript's 'expr' field could not be resolved.");
for (Field field : expressionInfoClass.getDeclaredFields()) {
if (Expression.class.isAssignableFrom(field.getType())) {
field.setAccessible(true);
exprField = field;
break;
}
}
}
}
} catch (Exception ignored) {}
STRING = stringField;
EXPR = exprField;
if (STRING == null && EXPR == null) {
Skript.error("Failed to initialize SkriptUtil: Could not find required fields");
}
EXPR = f;
}
public static Object[] getTemplateString(VariableString vs) {
try {
return (Object[]) STRING.get(vs);
return STRING != null ? (Object[]) STRING.get(vs) : new Object[]{vs.toString()};
} catch (IllegalAccessException e) {
throw new RuntimeException(e);
return new Object[]{vs.toString()};
}
}
public static Expression<?> getExpressionFromInfo(Object o) {
try {
return (Expression<?>) EXPR.get(o);
return EXPR != null ? (Expression<?>) EXPR.get(o) : null;
} catch (IllegalAccessException e) {
throw new RuntimeException(e);
return null;
}
}
@SuppressWarnings("deprecation")
public static boolean isCurrentEvent(Class<? extends Event> event) {
try {
Class.forName("ch.njol.skript.lang.parser.ParserInstance");
return ParserInstance.get().isCurrentEvent(event);
} catch (ClassNotFoundException e) {
return ScriptLoader.isCurrentEvent(event);
}
}
private static Optional<Field> tryGetOldStringField() {
try {
Field f = VariableString.class.getDeclaredField("string");
f.setAccessible(true);
return Optional.of(f);
} catch (NoSuchFieldException e) {
return Optional.empty();
}
}
private static Optional<Field> tryGetNewStringField() {
try {
Field f = VariableString.class.getDeclaredField("strings");
f.setAccessible(true);
return Optional.of(f);
} catch (NoSuchFieldException e) {
return Optional.empty();
}
}
}