Page 1 of 1

[Mod] keyset_chest [insecure]

PostPosted: Sat Feb 22, 2014 15:27
by Krock
THIS MOD IS INSECURE DO NOT USE
If you want to use it, hash all passwords and compare them instead of using plain text.

You can punch the chest with the key and it will open when the key is correct.
Owners also can loose their key and still open the chest as regular.
Image

Download: Download
License: WTFPL

PostPosted: Sat Feb 22, 2014 16:12
by PilzAdam
This mod is insecure.

Metadata is send to all clients, so every (hacked) client can see the password.

PostPosted: Sat Feb 22, 2014 16:53
by Krock
PilzAdam wrote:This mod is insecure.

Metadata is send to all clients, so every (hacked) client can see the password.


I know, but would you know another way instead of metadata?

PostPosted: Sat Feb 22, 2014 17:06
by rubenwardy
Hybrid Dog wrote:
Krock wrote:I know, but would you know another way instead of metadata?
you could write it somewhere into the player file


Never write anything to a player's file. It causes corruption.

Instead make your own file, like keyset_chest.txt

PostPosted: Sat Feb 22, 2014 17:09
by Krock
rubenwardy wrote:Instead make your own file, like keyset_chest.txt

That would mean, I have to store every node and item in there?
How about destroyed items? They would stay forever in that list :/

PostPosted: Sat Feb 22, 2014 17:09
by PilzAdam
rubenwardy wrote:
Hybrid Dog wrote:
Krock wrote:I know, but would you know another way instead of metadata?
you could write it somewhere into the player file


Never write anything to a player's file. It causes corruption.

Instead make your own file, like keyset_chest.txt

Yea, save it into a Lua table and write that into a file in the world directory. That way all the passwords will stay server-side.