Originally Posted by merlight
The real challenge for such add-on would be ensuring that a malicious add-on can't disable its function.
|
For an addon showing a dialog, it'd actually come down to load order for whether it's possible. If the malicious addon loads first and stores a clean version of the hooked function, it doesn't work. If the prevent addon loads first, it's good. It can keep the real SendMail() stored away privately, keep all functions private, and randomize the name of the control shown.
For zeroing gold, not sure. You might be able to hook something the add function to prevent gold being added, tie into an event to zero immediately after, etc.
From a more practical standpoint, ZOS is looking at
this thread for feedback about how to block this. Since ZOS obviously gets to load code first, it's definitely possible.