How to use setfenv to add custom requirements to global functions?

Asked by

6 years ago

I need to sandbox my scriptbuilder so the players can't disconnect players, I have found out how to insert custom values like so:

01function code(string)
02    -- I insert a custom FE converter before the loadstring here.
03    loadstring(string)
04end
05 
06setfenv(code, {
07    Workspace = workspace,
08    Game = game,
09    -- The above 2 values are for deprecated global value support
10    Require = nil,
11    require = nil,
12    -- I make the "require" value nil to prevent using 'require(num)' to get past my existing sandboxing.
13    print = [function(text)
14        game.ReplicatedStorage.PrintEvent:FireServer(tostring(text))
15    end]
16    -- The above function is to redirect the message to a custom GUI output
17})
18 
19link2string = HttpService:GetAsync( URL )
20-- Above fetches the pastebin string.
21code(link2string)
22--  Above activates the function with the included string.
23 
24 
25-- NOTE: This is not my entire code, it is a basic overview.
 View all 25 lines...

However, I have no idea how to do the above on global functions like ":Destroy()" or ":FindFirstChild()"

Without that, I cant keep players from disconnecting other players using the global destroy function.

So you can see, I need to know how to edit or disable those global functions otherwise it would be chaos.

So thats where I ask for your help, I have searched around the web and found no clear answer to this question.

A clear, easy to understand answer would make my day.

Why dont you just run if str:find(":Destroy") then return end ? (And for all your other cases.) RubenKan 3615 — 6y

Because they can just do something like this, "Player:("Des".."troy")()" ben0h555 417 — 6y

string.find is basically the worst way to fix this problem, :/ ben0h555 417 — 6y

But "Des".."troy" will be "Destroy". User#19524 175 — 6y

Thats not how string.find works, incapaz. ben0h555 417 — 6y

How to use setfenv to add custom requirements to global functions?

Answer this question