【安全加密】GM 指令审计：高危指令的调用留痕

local RISK = { ["@move"] = true, ["@give"] = true, ["@ban"] = true }
function gmSafe(actor, cmd, args)
    if RISK[cmd] then
        local ack = tonumber(getplayvar(actor, "HUMAN", "GM_ACK_TS") or "0")
        if os.time() - ack > 300 then
            audit(actor, cmd, args, false)
            sendmsg(actor, 0, "高危指令需要双人在场确认，请让另一名管理员协助")
            return
        end
    end
    gmexecute(actor, cmd, args)
    audit(actor, cmd, args, true)
end

local function audit(actor, cmd, args, ok)
    local p = class(actor)
    local day = os.date("%Y%m")
    local line = os.time() .. "|" .. p:GetName() .. "|" .. cmd .. "|" .. args .. "|" .. (ok and 1 or 0)
    local old = getsysvar("AUDIT_" .. day) or ""
    if old ~= "" then
        line = old .. ";" .. line
    end
    setsysvarex("AUDIT_" .. day, line, 1)
end
setontimerex(172, 3600)
function ontimer172()
    local raw = getsysvar("AUDIT_" .. os.date("%Y%m")) or ""
    local cnt = 0
    for row in string.gmatch(raw .. ";", "([^;]*);") do
        if row ~= "" then cnt = cnt + 1 end
    end
    if cnt > 5000 then
        sendmail("#安全审计员", 911, "审计条目超限", "本月已记录 " .. cnt .. " 条，请归档", "")
    end
end