lenis0012 / LoginSecurity

Lightweight and secure user authentication for Bukkit Minecraft servers
https://www.spigotmc.org/resources/loginsecurity.19362/
Apache License 2.0
98 stars 84 forks source link

Modifying hidden creative invenory #326

Open oakwire7 opened 6 months ago

oakwire7 commented 6 months ago

If player logs out in creative mode, someone can join with their name (without logging in), take an item from creative menu and put it in any slot. This will be added to the actual inventory, even overriding existing item.

Possible solutions:

lenis0012 commented 6 months ago

I like the idea of spectator/adventure while in auth. But it can cause some problems if the plugin is uninstalled and players remain in this gamemode.

More likely. I need to update the packet interceptor to block creative item actions.