Test and fix security fail #3


  • Accepted
  • Defect
Open
Assigned to _ForgeUser8010755
  • _ForgeUser8010755 created this issue Dec 18, 2011
    Owner

    @rbs90: Go

    i found a terrible security fail bro, if you register an acount (by example Nilinking) put the name of somebody else in your minecraft client (on a cracked client, by example rbs90) and them you enter your Nilinking“s password on the login section youll be able to login even when youre not rbs90... You have to put a client name check or something to fix this, also, youve to disable the "guest" mode, because even when you dont login you can manipulate the inventory of that person in guest mode, and trow things on the floor... i hope my testing helps you out :) tnx for answering n_n

  • _ForgeUser8010755 added the tags Accepted Defect Dec 18, 2011

To post a comment, please login or register a new account.