HAU's Admin Panel [ALPHA]

Note: This is in alpha and there are bugs (we’ve detected some and are fixing it!)

Bugs are for now:

  • You are able to kick Admins
  • The Admin panel disappears when you reset

Bugs that are fixed:

  • You cannot ban Admins

HAU’s Admin panel includes features such as:

  • Ban with reasoning
  • Kick with reasoning

More is coming soon!
Credits

@LuaAlbi - Scripter and ban and kick UI designer.
@HDAdminUnofficial - Owner of model and UI designer for the main page.

So let’s get into how it looks like.

Here is how it looks right now (please note this is currently in alpha)

Model Link

The model link is here: HAU's Admin Panel - Roblox

Make sure to read the readme provided in the model!

10 Likes

Hi! Looks very nice however, I have some questions.
Why should we use this over any other admin/admin panel? Are there any special features?
How do you store your data?
Is there any thing in this to keep people from Admin Abusing without being noticed?
Again, I really the design, and I hope for you the best.

3 Likes

Logs are.

I think datastores, I didn’t script it, @LuaAlbi did.

The special feature is a warn feature that some other panels do not have. Also, the GUI has a page animation and a back button too.

1 Like

I see. Does it automatically kick the player when a player reaches X Amount of warnings?

2 Likes

You do realise exploiters cant access ServerScriptStorage. Right?

Also yes expect people to go through your entire source code to check it’s legitimacy

2 Likes

I’ll try to find out if exploiter can be abused on this model.

1 Like

Basically, it’s a bad practice to put events in the GUI,
so it’s a good idea to put them in Replicated Storage.

EDIT: Also, you are using RichText Module from @Davidii, Why didn’t you put his name in CREDITS?

2 Likes

Also, if you are an dadmin and you try to get banned it just kicks you.

1 Like

Yes, I know. Only the exploiters that have LVL 7 coyld access to the admin panel. But in the bext version I am adding a module protection

1 Like

Exploiters cannot access ServerScriptStorage, it’s not replicated to their client at all, meaning they cant even get hold of the panel in the first place

4 Likes

Sorry, I forgotted that. It was for a notification gui.

Its disabled and I am going to delete it.

2 Likes

LVL 7 exploits don’t exist anymore since FilteringEnabled got introduced.

3 Likes

Was it a free model? If it was a free model, you are not required to give credit. Also, I did not do the scripting, I am the owner of the module and UI designer and @LuaAlbi is the scripter and UI designer of the kick and ban UI.

1 Like

To fix this, Click on the ScreenGUI and uncheck the “ResetOnSpawn” box in properties

1 Like

Maybe this is just me, but something about this is a little suspicious…

If you made something like this, which takes some effort to do, you should be able to know how to do that, it’s literally right there…

Designer for the main page? What does that mean…? It seems that this other person did the scripting and the UI, what did you do specifically. Clarification would be nice. :slight_smile:

I think other panels have this. On top of that, where do we view warns?

Actually, if it was a free model, you shouldn’t be putting this here claiming it is your own. It’s against the rules, please review this:

Breaking this rule is an automatic ban from the devforum.


Sorry for being harsh, it’s all a bit fishy to me.

4 Likes

Also, HDAdmin have warning and message feature.

;ServerMessage [MSG] ;Message [MSG] ;Hint [Hint].

Hi, I was wondering, what makes this admin panel different from all the other admin panels released on the forums? (e.g. a new feature which other admin panels don’t offer/a different way of storing data/etc?)

2 Likes

No, the design is from @HDAdminUnofficial but I just edited the UIs to make it as his main ui.

1 Like

It’s already updated and it does not have the module.

This is a warning to those who are considering using this:

This isn’t very well put together - I checked the programming, and it’s a mess.
One of the issues I’ve noticed is that there’s RemoteEvents within the UI, which the LocalScript executes to the Scripts. This is in every UI button for the commands.


This contains a few issues, the biggest being that there’s no admin verification - you could ban another admin, yourself, or even the game owner. This is shown within the code itself for the ban script.

local Ban = game:GetService("DataStoreService"):GetDataStore("Banned")



script.Parent.OnServerEvent:Connect(function(By,To,Rea)
	for i,v in pairs(game.Players:GetChildren()) do
		if v.Name == To then
			Ban:SetAsync(v.userId, true)
		end
	end
	
	game.Players[To]:Kick('\nBanned. \nBanned by '..By.Name..' \n Reason: '..Rea)
	
end)

There is code within the AdminMenu script to prevent this, but this would be after the admin/owner got kicked/banned.

game.Players.PlayerAdded:Connect(function(p)
local Status = Ban:GetAsync(p.userId)
	if Status then
		if table.find(Admins,p.Name) or table.find(Admins,p.userId) or p.userId == game.CreatorId then
			warn('Player: '..p.Name..' is banned but is an administrator.')
			else
			p:Kick("\nYou are banned.")
			end

But even then, this has a major flaw - this doesn’t take into account group owners. This wont detect the group owner of a game as an admin.
Code is also copied and pasted lazily - the ban script’s just the kick script but with the ban data store added.

script.Parent.OnServerEvent:Connect(function(By,To,Rea)
	game.Players[To]:Kick('\nKicked. \nKicked by '..By.Name..' \n Reason: '..Rea)
end)

Something to note with the data store while on the subject - there’s no error handling, and you don’t remove the player’s key from the data store if they’re not banned. Instead, they’re added, but with a saved value of false. I recommend using RemoveAsync instead.

local Ban = game:GetService("DataStoreService"):GetDataStore("Banned")



script.Parent.OnServerEvent:Connect(function(By,To,Rea)
	
			Ban:RemoveAsync(To)
	
end)

But again, there’s a flaw with this: you save the player’s UserId, not the player’s name - even if you got the player’s user id, it would be taken as a string - you can only remove a number data store key with a number value, it can’t be mixed. The unban local script doesn’t tonumber it either.

moduleLocation = script.RippleEffect
guiObject = script.Parent
m = game.Players.LocalPlayer:GetMouse()
RippleEffect = require(moduleLocation)


guiObject.MouseButton1Down:connect(function()
	script.RemoteEvent:FireServer(script.Parent.Parent.UsernameBox.Text,script.Parent.Parent.ReasonBox.Text)
end)

Overall, with all these issues, I cannot recommend this admin panel/script - there’s a lot of (security) flaws that need to be taken care of before this can be seriously be used.

EDIT
I highly recommend checking out my later reply.

Don’t use this admin panel. Find something else that’s better.

4 Likes