pagefaultgames / pokerogue

A browser based Pokémon fangame heavily inspired by the roguelite genre.
https://pokerogue.net
GNU Affero General Public License v3.0
4.29k stars 1.71k forks source link

[BUG] Users can "create" golden tickets via web developer tools #1914

Closed JonasLindermayr closed 1 month ago

JonasLindermayr commented 2 months ago

Via the developer tools it is possible to "create" golden tickets

There is a german youtube video about it.. he shows how to replicate it. He spreads it also a lot over social media like tiktok.

https://www.youtube.com/watch?v=UQYVtS-MZT4

CodeTappert commented 2 months ago

Yeah i have seen this on Tiktok also.

flx-sta commented 2 months ago

It's client side-code after all... time to verify voucher counts through the server too

CodeTappert commented 2 months ago

It's client side-code after all... time to verify voucher counts through the server too

Creates a lot of server load

walt253 commented 2 months ago

Not really a bug, it's more like a side effect of the game being client-sided. It's not just about golden tickets, one experimented user can use developper tools to tweak their save files on pretty much every aspect.

I find it sad that this content creator share stuff like this to non-experimented users that will surely abuse it until they are bored because once they have everything what is the point of playing?

I tested it and doing so I felt bad for the developpers. 😕

I think this needs a consensus ASAP to know what should be done about the developer tools and what actions should be taken against abusers if you decide to pursue them, personaly I don't think you should do that, I would let them hack their game as long the game is not competitive, their save is screwed and they can only blame themselves for ruining their own experience. 🤔

flx-sta commented 2 months ago

Well the general idea right now is: There is no multiplayer. You are only cheating yourself (except the scoreboard, but there is worse).