FOSS gamedev and creative worlds

Yes.

mase wrote:Could you please add protection of mesecons buttons and switches?

That would have to be done in mesecons.

[intllib-using mods fail security tests] Oddly, this is not even the boilerplate code from the intllib README. But when I looked on earlier versions of intllib, the dofile was still there. [I wrote patches to fix a bunch of the affected mods] The dofile was basically just a way to make sure intllib...

A "protection stick" would still require size limitations unless a number of sticks were consumed proportional to the size of the area. The stick would have to be fairly difficult to craft for it to serve as an effective replacement for the area number limit, and if it was that hard it wou...

I do /msg (server) tmanyo (pass) and it replies with nothing. So I do /msg (server) tmanyo and it says Playername and Password required. I try to use the commands to see if it is just a bug and I am really logged in, but sadly it gives me the message, you are not logged in. Well, the command is /ms...

It looks like the "Ingles" button is for spanish, but in Spanish "Ingles" means "English". Did you mean to use "Español"?

I get the same exact warning... I've made some changes to the stats setup (uses stats.minetest.net, which has direct A and AAAA records to the server), and now Avast shouldn't have any idea that minetest.net has anything to do with anything InchraNet. Are you sure that you're still getting the warn...

The authentication file? Sounds like a bad idea... The passwords are hashed. The hash isn't particularly secure (SHA-1 with player name salt), but nobody should be using passwords they care about with MT anyways. It may be a good idea to not release the auth file publicly, but only give it to one o...

The server is back. Considering that you often disappear for several months, would you consider making the full world available for download, including player files and perhaps the authentication file? Others have used local map saving to capture parts of your world and hosted it, but they haven't ...

I am unable to login to new servers from irc. This issue is an incompatibility with the new Secure Remote Password (SRP) authentication system. irc_commands isn't able to verify passwords with the new authentication tokens. As rubenwardy pointed out, you can disable SRP for your account by resettin...

srifqui/PoignardAzur: Is this still an issue? Has BrandonRese's false-positive report fixed it? If it's still an issue, please also report it as a false positive, and I'll try to get it fixed.

My loaded conf file contains: areas.self_protect = true [...] I edited settings.lua manually and changed this line to true: setting("boolean", "self_protection", false) Notice the difference? You set "areas.self_protect", but the mod is looking for "areas.self_pro...

Having added areas.self_protection = true to my conf file, users still get the error that they don't have self protection ability (can't protect). There are a few things involved in self-protection. First it has to be enabled of course, but there are still a few restrictions on it. Only players wit...

The refferer check is probably an attempt to protect from CSRF. There are better ways to do this that don't require you to check the referrer though.

Minetestforfun: A MySQL backend was made when database backends were first made plugable, but it wasn't included in the final code, possibly because MySQL is bad.

Calinou moved his repos again. I've fixed the URLs and updated the mods, but you'll have to run `git submodule sync` and `git submodule update --init`.
The warnings were normal since the zip was of a fairly old version, I've updated the zip to the latest version though.

I beat you to it. :-P
I wrote a PostgreSQL backend a few months ago, but didn't bother to put it in a PR.
It automatically sets up the tables and only requires one extra setting (postgresql_connection_info).
Here it is: https://github.com/ShadowNinja/minetest/tree/PostgreSQL

caffe23: You should read README.txt. You need to clone the submodules, use `git submodule update --init`.

Issues I've noticed: ⋅ The FAQ page returns a 403. ⋅ The PHP run time limit is set too low for a long-running database operation that I need to do (it needs to be set to a good 10-20 minutes or so, although it should probably be turned back down after I finish). ⋅ The S...

[PunBB compatibility has been fixed thanks to hacky code] Here's a cleaner solution that I came up with that goes in your nginx config instead: http://sprunge.us/CTSV This version also redirects you to the new URL instead of just showing the content at both URLs (just change "redirect" to...

Turkish sub-forum added.

nvrsbr: Your error isn't showing much information because of an engine bug that has since been fixed. Please try a build after 3a8c7888 (September 5, 2014). You can find one in the builds forum

I wonder why the security won't be activated it as default. If I see it correctly, there are actually only a few mods which would be possibly affected, of which almost all have already be edited to comply with the new mod security system. It will be on by default soon, I just left it off for a bit ...

You forgot to mention that “untrusted” mods also can't (shouldn't) set any setting starting with “secure.”. The list isn't meant to be exhaustive, but I've added your suggextion. What other functions are considered “insecure”? Can you give a list? And what about “dofile”? Actually, no, because ther...

Mod security has recently been implemented. This prevents rogue mods from doing whatever they want to your computer. For now the feature is disabled, because it breaks a few legitimate mods (although most of them have been patched by now). You can explicitly enable it by setting secure.enable_securi...

TheMasterAnimatronic wrote:How would i protect the entire map by default?

Just add an area that extends from -32000 to 32000 or so in all dimensions.

supercutsminetest wrote:When I hit "Go home," I fall through the floor.

Fixed.

supercutsminetest wrote:As of yet I haven't found any zinc, chromium, or uranium [...]

These have restrictive heights limits, you won't find them outside these elevations:

• Uranuim: -300 to -80.
• Zinc: -32 to 2.
• Chromium: -200 to -100

/protect <areaname> requires areas privilege everyone has to have areas privilege. No it doesn't, it requires whatever privilege areas.self_protection_privilege is set to [1], which is interact by default [2]. You obviously have to enable self-protection first though, which the README clearly state...

Where's your world in a box? I only know of one, and that one seemed fine.

Unknown nodes aren't greifing. Parts of mesecons were disabled because that mod's known to be slow sometimes. Some of them may be re-added.