Bug in economyapi (you can win and spend money from other users)

onebone / EconomyS

The economy plugin for PocketMine-MP

GNU General Public License v3.0

144 stars 191 forks source link

Bug in economyapi (you can win and spend money from other users) #367

Closed RocoWayne closed 7 years ago

RocoWayne commented 7 years ago

If you dont login (im using serverauth in my server) you can move around and play minigames, Win and spend money. You can change your name and spend money of any player without even login to the server.

DerddyDert commented 7 years ago

Just block the command at the spawn if you are using an bad auth plugin

onebone commented 7 years ago

EconomyS blocks spending money with permissions. It seems that ServerAuth doesn't block permission before login, please ask them to block permissions before logging in.