You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Logging shows when users visit the endpoints for uploading or downloading schematics. However, when multiple users do this at the same time, it won't always be clear who the source of the most recent schematic is.
So, I suggest logging the source of schematics. There were two ways I had in mind. Please consider both of them:
If logging is enabled, output a message to the server logs, i.e. [<time> INFO]: [Plex HTTPD] user uploaded schematic Plex.schematic
Regardless of the state of logging, attach the uploader's username to the uploaded file in a database. In-game, if saving schematics is available, log the uploader's name from there too. I don't advise displaying the names publicly, but just for auditing purposes, I think the creator of any given schematic should be known to the database. On TF, players have been saving schematics of representations of very unsavory real-life actions, as well as setups for crashing or lagging players. Knowing who created the offending schematics would go a long way in discouraging their malicious use.
The text was updated successfully, but these errors were encountered:
This should be expanded upon by using IP addresses, UUIDs, and usernames. This would ensure that we know exactly who did it and where they uploaded the schematic from.
An example of a log message would be like [<time> INFO]: [Plex HTTPD] <player name> (<uuid>) under <IP> uploaded schematic Plex.schematic
Logging shows when users visit the endpoints for uploading or downloading schematics. However, when multiple users do this at the same time, it won't always be clear who the source of the most recent schematic is.
So, I suggest logging the source of schematics. There were two ways I had in mind. Please consider both of them:
logging
is enabled, output a message to the server logs, i.e.[<time> INFO]: [Plex HTTPD] user uploaded schematic Plex.schematic
logging
, attach the uploader's username to the uploaded file in a database. In-game, if saving schematics is available, log the uploader's name from there too. I don't advise displaying the names publicly, but just for auditing purposes, I think the creator of any given schematic should be known to the database. On TF, players have been saving schematics of representations of very unsavory real-life actions, as well as setups for crashing or lagging players. Knowing who created the offending schematics would go a long way in discouraging their malicious use.The text was updated successfully, but these errors were encountered: