[BUG] Claim and block limit can be bypassed by adding leaders
Bartek200219 opened this issue ยท 5 comments
TLDR; Same as #730 except that people are adding themselvs by command after creating claim
Describe the bug
By using two accounts, it is possible to bypass the claim and block limit.
To Reproduce
- have 2 accounts
- first create claim
- first add second player
- second remove first player form claim
- block limit bypassed
Server and plugins versions (please complete the following information):
- Server: Paper 1.17
- Plugin Version: RedProtect-7.7.2
- Java Version: [Java 1.16
On truth, the claim is split by two players. This depends on you and your server policies, as example, on my server is not allowed two accounts of same player.
Regardless of the server's policy, it is not normal that through a few manipulations a player can bypass his /rp blocklimit... This issue is not closed, the plugin should prevent apply a leader player if this causes him to exceed his block limit.
on my server is not allowed two accounts of same player.
On my server every player is verified ether in person or by discord account with phone number. But that doesn't change anything when 2 people could do that instead of 2 accounts of same player.
Claim limit its already checked when the command addleader
is used, only block limit is not, where i am adding for next dev build. Limits is only ignored if the player have the permission redprotect.command.admin.addleader
.
For signs, the players in 2 and 3 lines is added as admin, not as leader.