Skip to content

[Security / Protection] Unauthorized text edit and ownership takeover of Signboards #134

Description

@ZekuOfficial

Describe your idea

Cheaters are able to modify the text on Signboards and take over ownership of the signboard object without having any rights or membership in the respective guild.

In a recent incident, a cheater wrote insults on other players' signboards. Furthermore, the cheater's player name appeared as the new owner on the signboard object itself.

Purposes

Currently, PalDefender's permission validation seems to focus primarily on structures with inventories (such as chest containers, where unauthorized access was successfully blocked). Because signboards do not have a traditional inventory, RPC commands for changing text and updating ownership pass through without validation.

Expected Behavior

Actions such as changing signboard text or updating the signboard owner ID should be restricted to guild members or the original builder, and unauthorized attempts should be blocked and logged by PalDefender.

Attachments

No response

Priority

Low

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions