BentoBoxWorld / BentoBox

Expandable Minecraft server plugin for island-type games like SkyBlock or AcidIsland.
https://bentobox.world
Eclipse Public License 2.0
337 stars 140 forks source link

Very serious island team management mistakes.Anyone can delete other people's islands. #2322

Closed AngelLuoLi closed 8 months ago

AngelLuoLi commented 8 months ago

Expected behavior

Island team management is normal.

Observed/Actual behavior

  1. Anyone can delete other people's islands.
  2. make the number of islands of players exceed the upper limit by transferring islands.

Steps/models to reproduce

  1. Create an island.
  2. Invite a player to your island.
  3. Use /is team promote [name of any player] to give the player privileges to island members.
  4. Use the /is team kick command to kick out this member.
  5. All the islands of the player who is kicked out will become empty.

I also found that I can use the function of resetting islands to delete other people's islands, but at present I can't reproduce them. The principle should be the same.

Includes that the player can have more islands than the upper limit in this way.

BentoBox version

[12:42:30 INFO]: BentoBox 版本: 2.2.0-SNAPSHOT-b2578 [12:42:30 INFO]: BentoBoxFAWEHandler 1.1.0 (ENABLED) [12:42:30 INFO]: Biomes 2.1.1 (ENABLED) [12:42:30 INFO]: BSkyBlock 1.17.1 (ENABLED) [12:42:30 INFO]: Challenges 1.2.0 (ENABLED) [12:42:30 INFO]: Chat 1.1.4 (ENABLED) [12:42:30 INFO]: DimensionalTrees 1.7.0 (ENABLED) [12:42:30 INFO]: DragonFights 1.8.1 (ENABLED) [12:42:30 INFO]: ExtraMobs 1.12 (ENABLED) [12:42:30 INFO]: Greenhouses 1.7.5 (ENABLED) [12:42:30 INFO]: Level 2.12.0 (ENABLED) [12:42:30 INFO]: MagicCobblestoneGenerator 2.5.1 (ENABLED) [12:42:30 INFO]: TwerkingForTrees 1.5.0 (ENABLED)

Plugin list

[12:43:26 INFO]: Server Plugins (64): [12:43:26 INFO]: Paper Plugins: [12:43:26 INFO]: - HuskHomes, HuskSync [12:43:26 INFO]: Bukkit Plugins: [12:43:26 INFO]: - AdvancedCrates, AnimatedScoreboard, APliiager, AuthMe, AutoFishing, AutomaticRestart, AutoPlacePlugin, BanItenlog, *BBSToper, BentoBox [12:43:26 INFO]: BentoBox-Biomes, BentoBox-BSkyBlock, BentoBox-Challenges, BentoBox-Greenhouses, BentoBox-Level, BentoBox-MagicCobblestoneGenerator, Boom, ChristmasFireworks, CMI, CMILib [12:43:26 INFO]: Cob, CommandLogger, DestroyRange, DragonFights, DWLislands, EClean, EntityBan, FastAsyncWorldEdit, FlightPermissionPlugin, GeminiCommand [12:43:26 INFO]: GlobalMarketPlus, GSit, ImageFrame, InstBind, ItemSoulBind, LiteSignIn, LuckPerms, minebbs, MinePay, MoveBuilding [12:43:26 INFO]: OneClickTreeChop, PlaceholderAPI, PlayerMenu, PlayerPoints, PlayerWarps, PlugManX, ProtocolLib, RaiseEntity, RegionEntityLimit, repairendportal [12:43:26 INFO]: ServerMonitor, SkinsRestorer, SkyBlockTweakers, spark, TabTPS, TrChat, Vault, VillagerAI, voicechat, WanderingTrader [12:43:26 INFO]: WitherSound, XConomy

Other

tastybento commented 8 months ago

Thanks for the report. This bug has been in the promote command for years!