Zeg9 wrote:hdastwb wrote:As a note to anyone using protection mods of this sort on servers, it is still possible for hostile players invade buildings by getting on top of their roofs and digging the block under their feet, falling in in the time that it takes for the server to replace the block. Because this is a client-side issue, I foresee absolutely no way to fix this in a mod.
However, I do believe that an effective fix for builders may be to build another layer filled with lava onto the roof of any building one doesn't want infiltrated.
It's more likely to be server-side, so even people with modified clients wouldn't be able to do it.
but for the moment the anticheat is a bit useless...
I could probably have been clearer; the problem
is client-side in the sense that it's with the way that Minetest clients work in general. The Minetest client has no concept of protection, so the client assumes that any block is fair game to be dug. The client is also in charge of physics, so when the block is dug the player that was standing on top of it falls through as if they had dug the block, because, as far as the client is concerned, they have. Only after a second or two (or more with appropriate lag), does the server veto the digging action and replace the block that the player dug, but by that time the player is already in the building and can already steal from unlocked chests, dump stuff from buckets, terrorize the residents, and such as they please.
I spend most of my time on Menche's server; there have been reports of people using this exploit to get into the stockroom of a shop and my self-proclaimed neighbor used it extensively to get into mine and bug me while I was trying to set it up. I feel sorry for posting this because I might just be allowing more people to use this exploit, but I think people ought to know so that they can protect their buildings from being infiltrated this way.
In terms of actually fixing the problem, I still can't think of any way to do it short of incorporating some sort of protection feature into the engine itself. Though, since protection is so common and such a necessity on servers, it may well be generally-applicable enough to warrant implementation in the engine.