Enable require-player-login-ip by default

[logykk]

This should be on by default to prevent automated bots from spamming chat messages.

[mikeprimm]

Not changing default - folks are free to set this, as they see fit.

[mrcbax]

[mrcbax]

@mikeprimm wanna change it now?

[DAMcraft]

My discord server was raided three times in the past using this as well! This isn't just an issue for server owners, this is used to harass people

[Funtimes909]

this needs to be merged, I had my discord members harassed by a targeted campaign using this

[MonkeySaint]

Dear the dynmap team, please pull this change!
There is currently a harassment campaign against the group SSI and the people Funtimes909 aka Amy, damcraftde aka Dami.

The group doing this used to be advertising their Discord server by spamming servers using your chat!
After their Discord server got terminated, they realized they could enact a personal vendetta.
This doesn't just affect your users but also many other people.
Please merge this commit into master, maybe even go further and disable the chat by default completely.

Thank you.

[bananasmoothii]

My discord server was raided three times in the past using this

Just... Disable web chat ?

Guys it's just one option you can change in the config, even if the default value is arguably not the best, just set allowchat: false in the config and the problem will be solved

[CuriousCodingCanadian]

My discord server was raided three times in the past using this

Just... Disable web chat ?

Guys it's just one option you can change in the config, even if the default value is arguably not the best, just set allowchat: false in the config and the problem will be solved

Please read the issue. We can't change every dynmap user's config. People are spamming every dynmap instance to get users to join our discord server to get it terminated.

All of this can be seen in a previous comment!

[bananasmoothii]

I can read, thank you.
If someone gets spammed and comes here to complain about it, they can also just change their config to avoid getting spammed 3 times.
I do agree that the defaults are not optimal but I am not the one deciding over code.

[CuriousCodingCanadian]

I repeat myself,

random dynmap users are being told to join the discord server. We have no dynmap, and as such our dynmap is not spammed.
A group with a personal vendetta against us is portscanning for dynmap instances that they can spam. Random dynmap instances are getting spammed, telling users to join ouir community. DAM was not spammed. Random people were spammed to join DAM's discord.

[petersv5]

If I understood you correctly the spam messages are encouraging players to join an unrelated "victim" discord. I.e. that gets hit with player propagated "backscatter".

Player-in-the-loop spamming was novel to me, but I can see how that can be a problem for the third party discord.