💍 srv-pawnshop — Pawnshop / Stolen Goods Buyer

A polished pawnshop where players turn stolen goods and drugs into cash or dirty money. Ships with its own custom NUI — live search, an "only what I own" filter, item images and inventory totals. Every sale is validated server-side: distance, job, amount and cooldown are all re-checked before a single item changes hands.

Built to drop into any setup — it auto-detects your framework, target and inventory, so there is usually nothing to configure beyond the item list.

✨ Highlights

• 🖥️ Custom NUI shop — live search, "only owned" filter, item images and a running inventory value
• 🔌 Auto-detects everything — framework, target and inventory are found on start; no manual wiring
• 🧩 Three menu styles — the built-in NUI, ox_lib context menu or qb-menu, switchable in one line
• 📍 Unlimited locations — add as many pawnshop NPCs as you like, each with its own model, scenario and job rule
• 👔 Per-NPC job locking — leave it empty for everyone, or restrict a spot to one job or a list of jobs
• 💵 Item, money or dirty money payouts — pay in marked bills, a custom item, or straight to cash/bank
• 📊 Discord logging — sales and security violations (out-of-range selling, unauthorized job, invalid amounts) as clean embeds
• 🔐 Webhook via convar — keep the URL out of the files entirely with set srv_pawnshop_webhook "..."
• 🌍 Turkish & English included — plain JSON locale files, add your own language by copying one file
• 🛡️ Server-authoritative — distance, job, stock and amount checks all run on the server

🛡️ Security

The sale flow was written assuming the client is hostile:

• Distance check on the server — a spoofed client cannot sell from across the map (Config.MaxUseDistance)
• Job re-validated server-side — the target menu check is convenience only, the server decides
• Amount validation & cooldown — negative, fractional and oversized amounts are rejected; a configurable cooldown sits between sales
• Rollback on failure — if the payout cannot be delivered, the sold items are returned
• Notification whitelist — the client only renders known message keys, so nothing arbitrary can be pushed to a player's screen
• Violation logging — every rejected attempt can be sent to Discord, so you can spot cheaters early

⚙️ Requirements

• FiveM server (fx_version cerulean)
• ox_lib (required — used for callbacks and notifications)
• Framework: QBox, QBCore or ESX — or run it standalone with ox_inventory
• Target: ox_target or qb-target
• Inventory: ox_inventory, qb-inventory or your framework's own inventory

A job requirement on any NPC needs a framework. With every job left empty the script runs standalone.

📂 What Stays Open

These files are escrow-exempt and ship fully readable — configure the script without touching protected code:

• config.lua — locations, items, prices, distances, cooldown, menu style
• server/config.lua — webhook, payout type, dirty money, limits
• locales/*.json — every piece of text the player sees, in plain JSON

The NUI files (script.js, style.css, index.html) ship minified and obfuscated to protect the interface. They are not encrypted, so colour tweaks are still possible, but the UI is not intended to be rebuilt.

📖 Installation & Documentation

Full setup, all config options and framework notes: https://sorvia.net/dokumanlar/srv-pawnshop

💬 Support

Stuck during setup or have a suggestion? Reach us on our Discord support server.