CHIP (Creative Hacked Item Preventer) 0.5.0

Tested Minecraft Versions:

• 1.12

Source Code:

https://github.com/Ruinscraft/CHIP

Contributors:

Concurrence

CHIP (Creative Hacked Items Preventer)

What does it do?
CHIP is a Bukkit plugin designed to combat the creation and use of hacked/modified items on a creative mode server.

CHIP depends on ProtocolLib

What CHIP prevents:

• Unobtainable Enchantment levels
• Incompatible Enchantments
• Fireworks not obtainable via crafting
• Modified creature spawn eggs (giant Slimes, nuke Creepers)
• Ridiculously long custom item names
• Ridiculously long custom item lore
• Unbreakable items
• Custom potion effects which are not normally obtainable
• Custom tiles which contain inventory (chest items that have objects attached to them when placed)
• Non-survival entity modifications
  • Invulnerable entities
  • Glowing entities
  • Entities with custom names visible
  • Entities with ridiculously long custom names
  • Small armor stands
  • Invisible armor stands
  • Armor stands with no base plate
• Various other non-survival NBT modifications

Example:


Client Side Crash Prevention:


Book Forgery Prevention:
Ever have players modifying authors of written books? Want to know if a book author has been modified? CHIP can do this. Simply enable the `book_forgery_prevention` option in the configuration. Newly signed books will contain a hidden lore with a cryptographically signed string containing the original signer and the time it was signed. Books which were created before the enabling of this option will appear as unverified until they are verified with the /verifybook command.

How CHIP prevents hacked items:
CHIP was designed to be the successor to CHIR (Creative Hacked Items Remover)

CHIP prevents hacked item creation by packet inspection. This means that users will not be able to create such items via modified clients in the first place, so they never spread on your server.

CHIP also removes existing hacked items in player inventories and in blocks which can have an inventory.

CHIP will prevent potions such as these and ensure they can't be used and get fixed/removed (depending on your config). Even from a dispenser.

Installation
Once you have downloaded a copy of CHIP,

1. Ensure you have Java 8
2. Ensure you have ProtocolLib installed
3. Copy the .jar file to your plugins directory of your Bukkit powered server
4. Run the server

I have only fully tested this on Spigot version 1.12.2 and semi tested this on Spigot 1.8.8. Other versions should work fine, as long as you have the appropriate ProtocolLib plugin installed. If there is a specific version that is not working and you would like support for, please make an issue on GitHub describing what server software (Spigot, Paper, Sponge, etc) and what Minecraft version you are interested in and I will make an attempt at supporting it.

Recommendations:

• BookExploitFix is recommended to be run along side CHIP to prevent malicious JSON in books.

• FastAsyncWorldedit (FAWE) is recommended to stop general abuse/exploits (eg. lots of items, lots of falling blocks, too much world physics, etc). Use the tick-limiter in the configuration.

Notice:
If you enable the armor stand options, CHIP will modify any existing ones you have in your world.

Configuration:
The latest version of the configuration file with comments can be found here.

Commands:

/chip (chip.command.info) - Basic information about the plugin
/chip reload (chip.command.reload) - Reloads the configuration file
/verifybook - Verifies a book with the username of the player who ran the command
/verifybook <username> (chip.command.verifybook.override) - Verifies a book under a different username than the player who ran the command​

Feedback/Issues:
Please leave your feedback in the ratings section. If you experience an issue with CHIP or want a feature added, please create an issue on the GitHub page.

Source:
CHIP is open source and licensed under MIT. Feel free to contribute.

TODO:

• Locale/language files

Donate:
If my software has benefited you commercially or you just feel inclined to donate, here is my paypal.me link.