lenis0012/LoginSecurity

Modifying hidden creative invenory

Opened this issue · 1 comments

If player logs out in creative mode, someone can join with their name (without logging in), take an item from creative menu and put it in any slot. This will be added to the actual inventory, even overriding existing item.

Possible solutions:

  • auto clear un-logged-in inventories
  • force survival (or even spectator/adventure) while auth

I like the idea of spectator/adventure while in auth. But it can cause some problems if the plugin is uninstalled and players remain in this gamemode.

More likely. I need to update the packet interceptor to block creative item actions.