RedProtect Anti-Grief

RedProtect Anti-Grief

73.3k Downloads

[BUG] Claim and block limit can be bypassed by adding leaders

Bartek200219 opened this issue ยท 5 comments

commented

TLDR; Same as #730 except that people are adding themselvs by command after creating claim

Describe the bug
By using two accounts, it is possible to bypass the claim and block limit.

To Reproduce

  1. have 2 accounts
  2. first create claim
  3. first add second player
  4. second remove first player form claim
  5. block limit bypassed

Server and plugins versions (please complete the following information):

  • Server: Paper 1.17
  • Plugin Version: RedProtect-7.7.2
  • Java Version: [Java 1.16
commented

On truth, the claim is split by two players. This depends on you and your server policies, as example, on my server is not allowed two accounts of same player.

commented

Regardless of the server's policy, it is not normal that through a few manipulations a player can bypass his /rp blocklimit... This issue is not closed, the plugin should prevent apply a leader player if this causes him to exceed his block limit.

commented

on my server is not allowed two accounts of same player.

On my server every player is verified ether in person or by discord account with phone number. But that doesn't change anything when 2 people could do that instead of 2 accounts of same player.

commented

Claim limit its already checked when the command addleader is used, only block limit is not, where i am adding for next dev build. Limits is only ignored if the player have the permission redprotect.command.admin.addleader.
For signs, the players in 2 and 3 lines is added as admin, not as leader.

commented

I tested, it's solved. Thanks !