search

AlmuraDev / SGCraft

Stargates mod for Minecraft
https://www.almuramc.com/sgcraft/SGCraft.html
MIT License
31 stars 31 forks source link

Players cant update others IDCs #167

Closed Bysokar closed 4 years ago

Bysokar commented 4 years ago

https://github.com/AlmuraDev/SGCraft/blob/master/src/mod/gcewing/sg/features/configurator/network/ConfiguratorNetworkHandler.java#L237

You're checking that the player being modified has Admin access, not the player sending the packet (player.getName())

Dockter commented 4 years ago

This is an incredible security flaw you've found......