"Ignite_Victims" node in "Explosions" module can bypass worldguard pvp flags #108


  • New
  • Other
Open
Assigned to shampaggon
  • _ForgeUser1569130 created this issue Nov 1, 2013

    Well I am not sure this will be supported but I will report anyway. Please close this ticket if you are not going to support this issue.
    In this issue you can bypass region protection flag and kill players in non-pvp area determined world protection plugin such as Worldguard.

    Tested with 3 different type of "pvp protection" using following plugins;

    1. Using Worldguard and deny pvp actions via using this command: /region define __global__ pvp deny
    2. Using Multiworld: /mw setflag [worldname] pvp false
    3. Using Multiverse: /mvm set pvp deny

    None of them could not prevent the issue.

    ###########What steps will reproduce the problem?

    1. Set the flag of pvp via using "/region flag xxxxxx pvp deny" of worldguard.
    2. Use any items that has "Ignite_VIctims" node in "Explosion" module.
    3. Hit players inside "pvp deny" region using the weapon mentioned above.

    ###########What happened?

    The weapon can bypass the worldguard flag of "pvp deny" and set fire on players regardless if there is flag.

    ###########What was supposed to happen?

    The weapon should not set players on fire.

    ###########What version of CrackShot are you using?

    v0.97.4 (current newest version)

    ###########Were there any errors in the console? If so, what were they?

    There is none.

    ###########Please provide your configuration file if necessary.

    This is simple example of weapon that cause the problem.
    http://pastebin.com/nDcgWgcB

  • _ForgeUser1569130 added the tags New Other Nov 1, 2013
  • _ForgeUser1569130 added an attachment GRENADE_MOLOTOV.yml Nov 1, 2013

    GRENADE_MOLOTOV.yml

    <p>Sample weapon that mentioned in the ticket</p>

  • Shampaggon removed a tag Defect Nov 2, 2013
  • Shampaggon added a tag Other Nov 2, 2013

To post a comment, please login or register a new account.