flagstone78 / quinto Goto Github PK

Submit button only checks if itself is visible before sending. The server only checks if the submitted tiles and position is valid (does not check if the person is on their turn). Anyone can force the turn to progress by putting this in the console: submitButton.visible=true; submitButton.click(). This can also occur if there is significant lag on the client which allows them to click the submit button multiple times before the reply to hide the button is recieved.