Cheating golden apples
LadyCailinBot opened this issue ยท 9 comments
WORLDGUARD-2320 - Reported by Darkblader24
My users can use the command /stack.
But they can cheat themselves enchanted golden apples (ID: 322:1).
They simply take one enchanted golden apple in their hand and use /stack. So all the normal golden apples (ID: 322) will be transformed into enchanted ones and compacted into one stack. That also works with heads of different players.
Pls fix this bug :)
Comment by sk89q
Geeze, /stack is so old. Not sure if we should fix it or remove the command :P
Comment by Ken.Xeiko
yeah, I need it too anyways. I'm using it for stacking mushroom soup so i can sell more than 27/chest
Comment by wizjany
This is probably because /stack checks for item data values (damage) but not metadata (nbt)
edit: wait that makes no sense, stack should not combine different data values, is that what you're saying it's doing?
Comment by Darkblader24
Yes, try it out.
Take an enchanted golden apple in your hand and an normal golden apple somewhere in your inventory. Then use /stack and you will get 2 enchanted golden apples in your hand.
Comment by Dark_Arc
https://github.com/sk89q/worldedit/blob/master/src/main/java/com/sk89q/worldedit/blocks/ItemType.java#L577 Needs to have golden apples included.
Comment by Darkblader24
That bug also works with heads of different players. I have a plugin installed, so when someone kills a player the victim drops his head with his skin on it. So users can has trophies with player skins.
And here I have the same problem as with the apples. When you have one head of Darkblader24 in your hand and some others from different players in the inventory and you use /stack, you suddenly have tons of heads from Darkblader24.
Link to that plugin: http://dev.bukkit.org/server-mods/player-heads/
Comment by wizjany
The head issue is due to NBT. Wolverness has been working on the API but it's not in the master branch yet so we might have to wait on that.