miniMAXIme: Character scaler and selector

by Pi-C

The player stands like a giant near the vehicles. Now you can adjust the size of your character -- and you can change your appearance at any time if you've other mods that provide extra characters!

Tweaks
11 days ago
0.16 - 2.0
26.4K

g [NEW] Possible Exploit Found

11 days ago
(updated 11 days ago)

Hey Pi-C,

It’s been great working through these issues together. I’ve got another one for you, and I promise I’m not trying to drive you crazy! 😅

This issue has the potential to seriously affect player experience, especially on larger servers, and it involves an exploit with the camera when using the miniMAXIme selector. The exploit occurs when there’s no character selected, and the currently selected character is removed from the list. This causes the camera to become unlocked, allowing players to freely move the camera with WASD controls.
Issue:

When the selected character is removed from the list, the camera remains unlocked. Ideally, the game should default to the "default character" whenever the selected character is removed, to prevent this issue. The default character would always be available, ensuring the camera stays locked.

Steps to Reproduce:

A. Have more than two characters, plus the default character.
B. Select a custom character (not the default).
C. Open the character selection screen.
D. Disable the selected character.
--> The camera will now be unlocked, and you can use WASD to move it freely.

Side Effects:

This bug allows the player to move the camera anywhere on the map, even into areas that would normally be hidden (like black areas). It can be exploited to reveal the entire map without radar, which could be a major issue on public servers.

Video Link:

https://drive.google.com/file/d/1Lqm4naf0XUJnHw6-keiC98MudUSiy-et/view?usp=sharing

Let me know if you need more details or any adjustments! Thanks again for all your help!

11 days ago

Thank you! I had already noticed that removing the active character would put the player in god mode. My idea was that people without a character would just choose a new one. But I've been testing in single-player mode, where the player also is admin. As the red buttons for entering god/editor mode will be shown when the setting is active and the player is admin, I'd always get these buttons and could detach from my character whenever I wanted. But I now realize that this can be used to bypass the "player must be admin" requirement.

Two approaches I can think of:

  • Fall back to default character when a player turns off the current character.
  • Disable button for active character in GUI for toggling available characters.

I'm not sure yet which one to use, but I'll take care of this. :-)

11 days ago

Very interesting! In single-player, I don’t see this being much of an issue, but in multiplayer, it could definitely cause problems. I actually manage a server, so it’s helpful to get a broader perspective on these things. Thanks for sharing this — it’s good to know you're aware of the potential impact.

New response