Enforce validatepin() to take a while to respond to avoid its abuse.

1 files changed, 2 insertions, 0 deletions

diff --git a/npc/functions/main.txt b/npc/functions/main.txt
index e0b1c2ac7..6bcc6d515 100644
--- a/npc/functions/main.txt
+++ b/npc/functions/main.txt
@@ -412,6 +412,8 @@ function	script	validatepin	{
         atcommand "@kick "+strcharinfo(0);
         return 0;
     }
+    // Enforce some cooldown to prevent an eventual exploit/abuse
+    sleep2(rand2(150, 400));
     mesc l("Thanks, @@. We just wanted to be sure it was you.", .@value$[0]);
     mes "";
     return true;