server: don't allow active clients to start downloads

Fixes potential exploits such as causing CTF flags to disappear in unpatched mods.
ec- · Jan 10, 2025 · 3c9f9d3 · 3c9f9d3
1 parent f5b387e
commit 3c9f9d3
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/code/server/sv_client.c b/code/server/sv_client.c
@@ -1284,6 +1284,8 @@ SV_BeginDownload_f
 ==================
 */
 static void SV_BeginDownload_f( client_t *cl ) {
+	if ( cl->state == CS_ACTIVE )
+		return;
 
 	// Kill any existing download
 	SV_CloseDownload( cl );