It is hardly difficult to hack the client, any cpp programmer could work it out, and it can
not be counted as "malicious": it does no harm.
It is not really hacking.To fly and no-clip without privileges, all you need to do is
remove the privilege check on the client that checks for fly privileges and no-clip privileges. The reason this is possible is because the player movement is
handled by the client, and not the server. Dont worry,
they can not give them self give, ban, admin, etc privs without hacking the server (which is very hard for the average MT player)
disable_anticheat = false will not help at all.
To prevent this,
you need a mod or code that:
- detects where the player is (ie: are they 5m away from any blocks)
- not are moving correctly (ie: falling)
- and have no fly privs
if these are true, then ban the player.
Malicious is stuff like DDoS'ing the server, or blocking/banning other players, or griefing, or stealling, etc. NOT FLYING