like the chatcommands in the plugin, also following console commands are not secured.
givecard <Steamid> // gives player a Normal Wave Card
givehardcard <Steamid> // gives player a Hard Wave Card
giveextremecard <Steamid> // gives player a Extreme wave card
because your argumentation was "no one would know" when i wrote you for the chat commands, i want to point out that those commands are openly promoted on the plugins page.
Also here, everyone can execute them and give themself the cards. No admin or mod level needed.
And before you come again with "someone digging through my code to force me doing something"..
I am a server owner that cares about what is running and how it works.
Commands that are meant to be used by admins or only by plugin-logic should not be executable by default players.
This can brick the whole economy or balance of the game. It open up unnesseccary doors for cheater and bugusers.
This is the basics for plugins.
Also worth to note:
All this gaps could be closed with 1 LOC each.
But since your licence is not allowing me to modify it, i request that you close this gaps.