From adbc3e0c53f2e46179da32461afdf133556e9536 Mon Sep 17 00:00:00 2001
From: Juice <etojuice@yandex.ru>
Date: Wed, 8 Jan 2020 14:50:14 +0300
Subject: [PATCH] Do not allow admins to change cvars with FCVAR_SPONLY flag
 when not in singleplayer via amx_cvar

1. Make amx_cvar command obey FCVAR_SPONLY flag.
2. Fix exploiting of amx_nextmap cvar value which is used in nextmap plugin.
---
 plugins/admincmd.sma | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/plugins/admincmd.sma b/plugins/admincmd.sma
index ca751f4ac0..3d8e2f68de 100755
--- a/plugins/admincmd.sma
+++ b/plugins/admincmd.sma
@@ -788,6 +788,12 @@ public cmdCvar(id, level, cid)
 		return PLUGIN_HANDLED
 	}
 	
+	if ((get_pcvar_flags(pointer) & FCVAR_SPONLY) && MaxClients != 1)
+	{
+		console_print(id, "[AMXX] %L", id, "CVAR_NO_ACC")
+		return PLUGIN_HANDLED
+	}
+	
 	if (equali(arg, "servercfgfile") || equali(arg, "lservercfgfile") || equali(arg, "mapchangecfgfile"))
 	{
 		new pos = contain(arg2, ";")