I remember (several years ago though) that calling a secure function directly, without using CallSecureProtected(funcName, ...), was raising lua errors?
It does. The point is, you don't need to warp it in the "if IsProtectedFunction", since that would always be true, unless you use a hacked game client.
Hybrid Mode
