[Mod] keyset_chest [insecure]

User avatar
Krock
Member
 
Posts: 3598
Joined: Thu Oct 03, 2013 07:48
GitHub: SmallJoker

[Mod] keyset_chest [insecure]

by Krock » Sat Feb 22, 2014 15:27

THIS MOD IS INSECURE DO NOT USE
If you want to use it, hash all passwords and compare them instead of using plain text.

You can punch the chest with the key and it will open when the key is correct.
Owners also can loose their key and still open the chest as regular.
Image

Download: Download
License: WTFPL
Last edited by Krock on Fri Jul 29, 2016 14:01, edited 3 times in total.
Newest Win32 builds - Find a mod - All my mods
ALL YOUR DONATION ARE BELONG TO PARAMAT (Please support him and Minetest)
New DuckDuckGo !bang: !mtmod <keyword here>
 

User avatar
PilzAdam
Member
 
Posts: 4026
Joined: Fri Jul 20, 2012 16:19
GitHub: PilzAdam
IRC: PilzAdam

by PilzAdam » Sat Feb 22, 2014 16:12

This mod is insecure.

Metadata is send to all clients, so every (hacked) client can see the password.
 

User avatar
Krock
Member
 
Posts: 3598
Joined: Thu Oct 03, 2013 07:48
GitHub: SmallJoker

by Krock » Sat Feb 22, 2014 16:53

PilzAdam wrote:This mod is insecure.

Metadata is send to all clients, so every (hacked) client can see the password.


I know, but would you know another way instead of metadata?
Newest Win32 builds - Find a mod - All my mods
ALL YOUR DONATION ARE BELONG TO PARAMAT (Please support him and Minetest)
New DuckDuckGo !bang: !mtmod <keyword here>
 

User avatar
rubenwardy
Member
 
Posts: 4500
Joined: Tue Jun 12, 2012 18:11
GitHub: rubenwardy
IRC: rubenwardy
In-game: rubenwardy

by rubenwardy » Sat Feb 22, 2014 17:06

Hybrid Dog wrote:
Krock wrote:I know, but would you know another way instead of metadata?
you could write it somewhere into the player file


Never write anything to a player's file. It causes corruption.

Instead make your own file, like keyset_chest.txt
Last edited by rubenwardy on Sat Feb 22, 2014 17:06, edited 1 time in total.
 

User avatar
Krock
Member
 
Posts: 3598
Joined: Thu Oct 03, 2013 07:48
GitHub: SmallJoker

by Krock » Sat Feb 22, 2014 17:09

rubenwardy wrote:Instead make your own file, like keyset_chest.txt

That would mean, I have to store every node and item in there?
How about destroyed items? They would stay forever in that list :/
Newest Win32 builds - Find a mod - All my mods
ALL YOUR DONATION ARE BELONG TO PARAMAT (Please support him and Minetest)
New DuckDuckGo !bang: !mtmod <keyword here>
 

User avatar
PilzAdam
Member
 
Posts: 4026
Joined: Fri Jul 20, 2012 16:19
GitHub: PilzAdam
IRC: PilzAdam

by PilzAdam » Sat Feb 22, 2014 17:09

rubenwardy wrote:
Hybrid Dog wrote:
Krock wrote:I know, but would you know another way instead of metadata?
you could write it somewhere into the player file


Never write anything to a player's file. It causes corruption.

Instead make your own file, like keyset_chest.txt

Yea, save it into a Lua table and write that into a file in the world directory. That way all the passwords will stay server-side.
 


Return to WIP Mods

Who is online

Users browsing this forum: No registered users and 7 guests

cron