andrewphorn / ClassiCube-Client

The applet used for classicube.net
34 stars 19 forks source link

Hacking physics still work with -hax in server motd #261

Closed Ven983 closed 9 years ago

Ven983 commented 10 years ago

There is a bug that allows players to travel down water and lava as if hacks are still enabled, meaning the physics are quicker than default. We have tested on two different servers, one with -hax, and one with +hax. If a player has configured their client's advanced options like so: Enable Hacks: No SpeedHack type: Adv Then the player will travel down lava and water faster on a server where the -hax flag is enabled. Note though, that this only works when a player pushes the escape key. If you look at the screenshot below, you can see that the server's motd contains the -hax flag. And the video better explains what I'm speaking about, you may have to watch it a couple of times, since its hard to notice unless you know what you're looking for.

http://i.imgur.com/ARqFXJR.png

http://youtu.be/phOM3xkoFJE

andrewphorn commented 10 years ago

Client physics are (or should be, unless it got reverted) forced to 'normal' if the player cannot use any hax.

In the screenshot, you have a message indicating that you are considered 'op' or higher on the server, and that hax are enabled.

Could you try it on an unprivileged account?

Ven983 commented 10 years ago

I have just tested it on an account which is ranked player, status does not change.

andrewphorn commented 10 years ago

Marked as bug, suggested action would be the old behavior of forcing 'normal' hacktype if no hax can be used.

voidpublic commented 9 years ago

I think this one is already fixed as far as I'm aware