Skip to content

docs(add-resources): add a file check before uploading a FiveM resource (DE + EN) - #11

Open
mkcrw wants to merge 1 commit into
emeraldhost:mainfrom
mkcrw:fix/add-resources-pre-upload-check
Open

mkcrw wants to merge 1 commit into
emeraldhost:mainfrom
mkcrw:fix/add-resources-pre-upload-check

Conversation

@mkcrw

@mkcrw mkcrw commented Oct 27, 2026

Copy link
Copy Markdown

Summary

This adds one step to "How to Add Resources to Your FiveM Server" (EN + DE), between "Note the folder name" and "Connect via SFTP": a short check of the extracted files before they go onto the server.

Why: backdoored copies of leaked or "free" FiveM resources are a common way servers get compromised, and the guide currently goes straight from extracting the archive to uploading it. The new step tells readers what to look for in a few lines:

  • the script and files entries in fxmanifest.lua only list files they expect,
  • PerformHttpRequest combined with load/loadstring (downloaded code that gets executed),
  • long obfuscated strings and code hidden after a long run of spaces.

It ends with a tip linking to a free in-browser scanner, including the limitation that a clean result is not a guarantee and that escrow-encrypted files cannot be checked. I also set updated: "2026-10-27" in both files and renumbered the following steps (6, 7).

Disclosure: I run RPScripts, the site that hosts the linked scanner (https://rpscripts.net/tools/fivem-backdoor-scanner/). It is free, needs no account, and the scan runs in the browser without uploading files. If you prefer the guide without an external link, I'm happy to remove the tip and keep only the checklist, or to change the wording however you like.

Type of change

  • New guide
  • Fix or update to existing content
  • Restructure or navigation change
  • Tooling / repo metadata

Contributor checklist

  • Frontmatter complete: slug, language, title, description and date are present and accurate
  • Both languages: de.md and en.md exist and declare available_languages: ["de", "en"]
  • Language tags on fences: no new code fences added
  • No em-dashes: none in the new text
  • Images optimized: no images added
  • Cross-refs use canonical paths: no new internal links; one external link with a full URL
  • Spell-checked in both languages of the page
  • Checks pass: the automated checks on this PR are green
  • Links and languages verified: npm run check ran locally and passed

Customer number for the credit

Customer number: (none, no credit needed)

Notes for reviewers

The step sits inside the existing "Upload the resource" list so it comes after extracting the archive and before the SFTP upload. Happy to move it, shorten it, or drop the scanner link.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant