TrialChamberPro

1.2.19 - 2026-01-09

Added

• Plugin Info Command: /tcp info now shows plugin information when used without arguments
  • Displays version, authors, database type, chamber count, platform (Paper/Folia)
  • Shows integration status: WorldEdit/FAWE, WorldGuard, PlaceholderAPI, Vault
  • Shows feature status: Per-Player Loot, Spawner Waves, Spectator Mode, Statistics
  • Requires tcp.admin permission
  • /tcp info <chamber> still shows chamber info (existing behavior)

Fixed

• GUI Item Drag Exploit: Fixed players being able to drag items inside GUI menus
  • Root cause: setOnGlobalDrag was missing from all 17 GUI views
  • Players could drag items by holding click and moving, bypassing click handlers
  • Now all views have both setOnGlobalClick and setOnGlobalDrag handlers
• Vault Spam-Click Exploit: Fixed players being able to spam-click vaults to get multiple loot drops
  • Root cause: The in-memory lock check was inside the async coroutine, not the sync event handler
  • Multiple clicks could launch multiple coroutines before any of them checked/set the lock
  • Fix: Lock check now happens SYNCHRONOUSLY in the event handler before any async work
  • Uses location-based lock key (player + coordinates + vault type) for immediate protection
• Keys Consumed Without Loot: Fixed trial keys being consumed even when no loot is generated
  • Now checks if loot table exists BEFORE attempting to open vault
  • If loot generation fails (empty result), key is NOT consumed and vault is NOT marked as opened
  • Player receives error message explaining the configuration issue
  • Common cause: TAB characters in loot.yml (YAML requires spaces, not tabs!)

Technical Details

• Added gui.setOnGlobalDrag { it.isCancelled = true } to all 17 GUI view files
• VaultInteractListener.onVaultInteract() now checks/sets the spam protection lock before launching coroutine
• Lock key format changed from {uuid}:{vaultId} to {uuid}:{x}:{y}:{z}:{type} for sync access (no DB lookup needed)
• Debug logging shows "Vault interaction ignored - already opening (spam protection)" when spam detected
• New messages in messages.yml: plugin-info-* for plugin info display