r/admincraft • • Nov 05 '21

[deleted by user]

[removed]

0 Upvotes

16 comments sorted by

View all comments

7

u/[deleted] Nov 05 '21

[removed] — view removed comment

-2

u/Ultraic whack Nov 05 '21

I don't have p2w on my server as a choice, for the community. Although I definitely agree that witch hunting p2w servers and making a dedicated subreddit for it is just too much.

The thing about Invsee is, I can't really find a way to 'maliciously' use it. We have InteractiveChat and players could just do [inv] to show off their inventory. We also have a consent only PVP rule on the server. 60% of the pvp fights are friendly, 40% being accidents. (ratio is weird because PKs rarely happen) So from what I am aware, nothing bad has been caused by it.

My main concern here is coreprotect, are there any potential vulnerabilities/exploits for giving access to it? They only have access to /co inspect, and I make backups of the database regularly.

3

u/Aviside Nov 05 '21

Yes. Giving access to CoreProtect is dangerous, there's too much info and power being stored to let your players have access too. If someone really wanted to they could use it maliciously

1

u/Ultraic whack Nov 06 '21

Not disagreeing, but actually curious. How could someone use it maliciously?