{"action":"created","issue":{"url":"https://api.github.com/repos/AuthMe/AuthMeReloaded/issues/1204","repository_url":"https://api.github.com/repos/AuthMe/AuthMeReloaded","labels_url":"https://api.github.com/repos/AuthMe/AuthMeReloaded/issues/1204/labels{/name}","comments_url":"https://api.github.com/repos/AuthMe/AuthMeReloaded/issues/1204/comments","events_url":"https://api.github.com/repos/AuthMe/AuthMeReloaded/issues/1204/events","html_url":"https://github.com/AuthMe/AuthMeReloaded/issues/1204","id":226848658,"number":1204,"title":"Maybe major security issue ","user":{"login":"Dimatert9","id":8667294,"avatar_url":"https://avatars0.githubusercontent.com/u/8667294?v=3","gravatar_id":"","url":"https://api.github.com/users/Dimatert9","html_url":"https://github.com/Dimatert9","followers_url":"https://api.github.com/users/Dimatert9/followers","following_url":"https://api.github.com/users/Dimatert9/following{/other_user}","gists_url":"https://api.github.com/users/Dimatert9/gists{/gist_id}","starred_url":"https://api.github.com/users/Dimatert9/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Dimatert9/subscriptions","organizations_url":"https://api.github.com/users/Dimatert9/orgs","repos_url":"https://api.github.com/users/Dimatert9/repos","events_url":"https://api.github.com/users/Dimatert9/events{/privacy}","received_events_url":"https://api.github.com/users/Dimatert9/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-05-07T10:48:38Z","updated_at":"2017-05-07T10:54:08Z","closed_at":null,"body":"https://github.com/AuthMe/AuthMeReloaded/blob/master/src/main/java/fr/xephi/authme/util/PlayerUtils.java#L40\r\nIn this line p.getAddress() or p.getAddress().getAddress() can be null. I dont know how(maybe ip spoofer or uuid spoofer) but it can be null. And when you try get player ip https://github.com/AuthMe/AuthMeReloaded/blob/master/src/main/java/fr/xephi/authme/process/join/AsynchronousJoin.java#L78 there will be NPE and player probably will not need to be use /login command"},"comment":{"url":"https://api.github.com/repos/AuthMe/AuthMeReloaded/issues/comments/299697674","html_url":"https://github.com/AuthMe/AuthMeReloaded/issues/1204#issuecomment-299697674","issue_url":"https://api.github.com/repos/AuthMe/AuthMeReloaded/issues/1204","id":299697674,"user":{"login":"Dimatert9","id":8667294,"avatar_url":"https://avatars0.githubusercontent.com/u/8667294?v=3","gravatar_id":"","url":"https://api.github.com/users/Dimatert9","html_url":"https://github.com/Dimatert9","followers_url":"https://api.github.com/users/Dimatert9/followers","following_url":"https://api.github.com/users/Dimatert9/following{/other_user}","gists_url":"https://api.github.com/users/Dimatert9/gists{/gist_id}","starred_url":"https://api.github.com/users/Dimatert9/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Dimatert9/subscriptions","organizations_url":"https://api.github.com/users/Dimatert9/orgs","repos_url":"https://api.github.com/users/Dimatert9/repos","events_url":"https://api.github.com/users/Dimatert9/events{/privacy}","received_events_url":"https://api.github.com/users/Dimatert9/received_events","type":"User","site_admin":false},"created_at":"2017-05-07T10:54:08Z","updated_at":"2017-05-07T10:54:08Z","body":"some logs:\r\nnormal join \r\n```[12:53:21 INFO]: RGKFCY[/87.117.37.182:46481] logged in with entity id 4620876 at ([world]-7.5, 92.0, -1.5)\r\n```\r\n```RGKFCY[/87.117.37.182:46481] ```\r\nip spoofed join\r\n```[16:08:03] [Server thread/INFO]: MainDRY[MainDRY:50367] logged in with entity id 875222 at ([world]687.9481154132752, 138.40777263112358, 180.08483307248775)```\r\n```MainDRY[MainDRY:50367]``` \r\nplayer dont have ip address"}}
{"actor":{"display_login":"Dimatert9"}}