New Shop Panel Updating Shop Modal Quickly whipping up these designs atm. They may change a bit (e.g, button colors). Fields Shop: the shop Server: the server Owner: the shop owner (this is determined by the player with the most signs in the shop, so may not be 100% accurate. I don't want to manually update shop owners, that would be a hassle) Items Traded: Total unique number of items bought + sold at the shop. Edit: to edit the shop. Needs a token which I'll assign to people I trust to help me add/remove/update shops. I'm still working hard! Let's see if I can release this today.
Shows the amount of unique items being purchased + sold at the shop. This is currently a placeholder for some awesome (future) features I have in mind: Clicking on it will open up a profile of the shop, showing all the items being bought or sold. 'Analysis' of the shop can be performed: Compares the price of each item over the average buy/sell price for that item, and indicates whether the price is good, fair, or poor This will be awesome for shop owners to see all the items they have in one place and how they compare to other shops.
02/16/2020 2:51 PM (CST): Update completed in ~5 minutes I'm getting better at this. [UPDATE] [V1.0.3]: Spoiler Completely redesigned item tables Completely redesigned shop tables Overall, better user experience
Players have to enter a token (passcode) to update the shops. These tokens will be assigned to approved users who are willing to add, remove, or modify shops. This is a common report, I’ll figure out a way to make it more clear that it’s for authenticated users only. Nonetheless, thank you to those who warned me about this!
Does this pull directly from the database that the chest shop plugin runs off of? if so would there be a way to add a binary in stock field to the database and edit the method that returns the "This shop is out of stock" message to update that binary field with a 0 for out of stock that can then be read by shopdb? I'm sorry if this is in no way possible. I'm not sure how much freedom you have with the plugins.
Hey SplayTick, This is actually not a plugin at all. This is something I've programmed and runs entirely independently of the server. The mod which allows any player to update the shops scans the shops specified boundaries and parses valid trade signs to find which items the shop is buying or selling. Since there is no way (that I know of) on the client-side to read the contents of a locked chest (or even an unlocked one for that matter - the contents of a chest is stored on the server, and that information is not available on our Minecraft client until we actually open the chest). Thus, there is no way to programatically tell if the shock is out of stock or not when scanning.
ok. I thought the shopdb site interacted with a dataset on the minecraft server to get the list of items sold at each shop and the amounts.
Understandable. I was also wondering if there would be any way of having something like a weekly csv available for download. It wouldn't have to be a exhaustive list of every item at every shop. Just something that would give the mean price for each item. I know this wouldn't be the most accurate unless we could get all shop owners to use the mod and update their shops regularly but it could help shops be more competitive with their pricing.
Update [HOTFIX] Unfortunately, only authorized users may update shop items from now on. Due to reverse-engineering / exploitation of a method that was publicly available to allow all users to update shop items, malicious users were able to upload fake items or even modify existing items. This was not a vulnerability, rather it was misuse of an intended feature which allowed any player to update shops. @UnitedStates2, thank you for alerting me about this. There is no work-around, and I'm afraid not just anybody can be allowed to update items anymore. The discovery of this exploit was alerted to me just recently today, and I rolled out this hotfix within the same hour. I will work on getting members of staff or other trusted people to help me update shop items. They will be updated at least once per day.
You're describing a vulnerability. Lack of authentication process is a vulnerability. An actually secure solution wouldn't rely on the good will of the client and just trusting nobody will ever be bored enough to exploit that trust. Aka, it wouldn't use a mod, or if it did use a mod, it'd need a server-side token request to ensure authentication.
Well, there's an authentication process now. Unfortunately there is no way to implement an authentication process and simultaneously allow everybody to be able to update shops.
You're exactly right! This is the first project like this I have released, and it is still considered in beta for reasons like this. The latter is exactly what I have implemented. It actually was already in place, though this server-side token was shared publicly with the client.
