Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Suggest commands /reload and /restart cannot run in command block #20

Open
HowardZHY opened this issue Jan 2, 2022 · 8 comments
Open

Comments

@HowardZHY
Copy link
Contributor

Is your feature request related to a problem? Please describe.
This could cause security problems. Wurst and other hacked clients could get written cmd-blocks with /rl and /restart and activate with redstone.

Describe the solution you'd like
/reload and /restart cannot run in cmd-block anymore.

Describe alternatives you've considered
null

Additional context
null

@CyberFlameGO
Copy link
Contributor

This feature request can most likely be implemented via the API, so in my opinion it’s irrelevant

@sadcenter
Copy link

sadcenter commented Jan 18, 2022

This feature request can most likely be implemented via the API, so in my opinion it’s irrelevant

Exactly, ServerCommandEvent is a cancelable event (BlockCommandSender is the implementation of command block sender I think)

@HowardZHY
Copy link
Contributor Author

I reported this to paper issues and they dont even think this is a problem

@CyberFlameGO
Copy link
Contributor

Exactly, it isn't

@HowardZHY
Copy link
Contributor Author

cmd-block's permit level is 2 , isnt it
/restart permit level should be 4 , like /stop

@CyberFlameGO
Copy link
Contributor

Oh really? I thought command blocks having a lower operator level was only on later versions. Regarding your point though, I don't think /restart and /reload care what operator level the user has, unlike with /stop. It's a valid point but I don't see anyone encountering issues regarding it because the circumstances are too unique, and even if it's encountered a plugin can mitigate it

@HowardZHY
Copy link
Contributor Author

https://minecraft.fandom.com/wiki/Permission_level
if /restart can even run with permit level 1 OP (change in ops.json) , that MUST be an PROBLEM

@crafter23456
Copy link

PaperMC/Paper#7567 no comment besides you can only report issues there to their latest version...
disable commandblocks in your server.properties and youre fine. dont work with operators, work with permissions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants