This object is in archive! 

Store Block exploit, can pull items from containers of a different owner

Nick F. shared this bug 3 years ago
Won't Fix

Suppose I want to buy a steel plate from a store block owned by another player. If the store block has no access to steel plates in a container owned by the store owner, then buying a steel plate will pull one from another accessible container in the conveyor network, regardless of the ownership of that container.

Context:

I'm a server admin trying to build a multi-player modular trading station. Each player on the server can build a store module owned by them and plug it into the main station. Other players can then dock to the main station and enter any of the shops to buy or sell. The main station blocks are owned by me, and the blocks of each shop module are owned by their respective builders.

I expected each store block to pull items only from the containers that it shared ownership with.


Instead I found that if a store block has a listing for an item, but no access to that item in containers with the same ownership, it will actually pull that item from any other connected container, even those owned by other players.

This can thus be used to steal items from containers owned by others. I'm pretty sure this is an unintentional function of the store block on Keen's part.

Obviously, this has put my trading station on hold until this exploit is fixed. If store blocks can be made to only pull items from containers of the same owner, then this should fix the exploit and allow my trading station to work. Any help would be greatly appreciated.


Regards,

Nick

Replies (4)

photo
1

I have not been able to reproduce this.

I tried with NPCs and with Space Pirates owning the stores and containers and the Store correctly created a message about not having enough of the sold item, when an I tried to buy a Bulletproof glass from an NPC controlled store which was in the same conveyor system as Space pirate owned container which contained said glass.


Can you provide us with more information?

- please share a blueprint of your station with us

- does it happen only with player owned containers?


Meanwhile, have you tried separating the conveyor systems? If each store owner had his own conveyor system, then it should not allow this exploit to flourish, right?


I hope this workaround helps you,


Keen QA

photo
1

Thanks for the prompt reply!

I'm having this problem on a DS, with store blocks and containers owned by different players, in different factions, all on the same grid. I made a little video to explain:


https://youtu.be/BTMza3GVQ3Y

I haven't tested it with NPCs, only other players.

As for the workaround, thanks, but I'm afraid it won't work with the station's setup. The station is modular, designed to have a centralized docking area connected to all the store blocks and containers at once, and will be able to add more store modules for new players without changing the design of the station. For the workaround to work each store module would need a dedicated dock/landing pad with a dedicated conveyor line. This would add to the complexity of the station and visiting players would have to move their ship to a different connector every time they buy from a different store block.

I realize this build may be a bit ambitious, but it should work once this bug is gone. I hope I'm not asking too much.

Thanks for the help!

photo
1

Hello, Nick!

I appreciate this thread is quite old. Is this still an issue that persists with you or has it since been resolved? If it is still happening, please could you provide a blueprint with reliable steps to reproduce the issue? I will close this thread if it is no longer an issue for you :)

Kind Regards

Laura, QA Department

photo
1

Hello, Engineer!

Because there is no new comment from you, and we are unable to reproduce the issue on our own, I will close this thread now as outdated.

If you or any other player will experience this issue again, please make a new thread and provide all needed info there.

Thank you for understanding.

Kind Regards

Keen Software House: QA Department

Replies have been locked on this page!