ChestLocked

Update Log: Security Patches & Economy Overhaul

This update focuses on critical security exploits involving hoppers and minecarts, introduces a new Discord Webhook system, and refactors the internal code for better performance.

️ Critical Security & Exploit Fixes

• Hopper Minecart Patch: Fixed a major exploit where Hopper Minecarts could suck items from locked chests through blocks. InventoryMoveItemEvent now strictly checks minecart interactions.
• Hopper Pushing Loophole: Fixed an oversight where unlocked hoppers could push items into locked chests. The system now validates the security of the Destination inventory to prevent griefers from filling players' chests with junk.
• Entity Glitch Protection: Added safeguards against using entities (Item Frames, Armor Stands) to glitch block interactions and bypass locks.

✨ New Features

• Discord Integration (Webhooks): You can now connect the plugin to a Discord channel!
• Alerts: Get notified when a chest is being lockpicked (" Alert: Your chest at X... is being lockpicked!").
• Tax Warnings: Automatic notifications when a lock expires due to unpaid tax.
• Active "Foreclosure" System: Moved from passive tax checking to an active schedule. The server now runs a task every hour to identify and unlock chests with expired tax immediately, keeping the economy moving.

GUI & Quality of Life

• GUI Pagination: Added "Next" and "Previous" page support for the Friend Selector and Nearby Player menus. No more missing names when you have more than 27 friends/players online!
• Visual Economy Feedback: The GUI now provides visual cues (e.g., Red Glass Pane) if a player has insufficient funds to pay tax or fees.
• Full Localization: Removed hardcoded strings (e.g., "§b§lStatus & Info") from MenuManager. All GUI item names and lores are now fully editable in messages.yml.

⚙️ Technical & Internal Changes

• Major Refactor: Addressed the "God Class" issue in LockLogic.java. Logic has been split into dedicated listeners (BlockBreakListener, InventoryMoveListener, ExplosionListener) for cleaner, more maintainable code.
• Optimization: Improved event handling efficiency for block breaking and interactions.

⚠️ Important Notes for Admins Config Reset Recommended: Because of the new updates, your config.yml has changed. Please backup your old config and regenerate a new one to access these features.

Update Log: Security Patches & Economy Overhaul

This update focuses on critical security exploits involving hoppers and minecarts, introduces a new Discord Webhook system, and refactors the internal code for better performance.

** Critical Security & Exploit Fixes**

• Hopper Minecart Patch: Fixed a major exploit where Hopper Minecarts could suck items from locked chests through blocks. InventoryMoveItemEvent now strictly checks minecart interactions.
• Hopper Pushing Loophole: Fixed an oversight where unlocked hoppers could push items into locked chests. The system now validates the security of the Destination inventory to prevent griefers from filling players' chests with junk.
• Entity Glitch Protection: Added safeguards against using entities (Item Frames, Armor Stands) to glitch block interactions and bypass locks.

✨ New Features

• Discord Integration (Webhooks): You can now connect the plugin to a Discord channel!
• Alerts: Get notified when a chest is being lockpicked (" Alert: Your chest at X... is being lockpicked!").
• Tax Warnings: Automatic notifications when a lock expires due to unpaid tax.
• Active "Foreclosure" System: Moved from passive tax checking to an active schedule. The server now runs a task every hour to identify and unlock chests with expired tax immediately, keeping the economy moving.

GUI & Quality of Life

• GUI Pagination: Added "Next" and "Previous" page support for the Friend Selector and Nearby Player menus. No more missing names when you have more than 27 friends/players online!
• Visual Economy Feedback: The GUI now provides visual cues (e.g., Red Glass Pane) if a player has insufficient funds to pay tax or fees.
• Full Localization: Removed hardcoded strings (e.g., "§b§lStatus & Info") from MenuManager. All GUI item names and lores are now fully editable in messages.yml.

⚙️ Technical & Internal Changes

• Major Refactor: Addressed the "God Class" issue in LockLogic.java. Logic has been split into dedicated listeners (BlockBreakListener, InventoryMoveListener, ExplosionListener) for cleaner, more maintainable code.
• Optimization: Improved event handling efficiency for block breaking and interactions.

⚠️ Important Notes for Admins

Config Reset Recommended: Because of the new updates, your config.yml has changed. Please backup your old config and regenerate a new one to access these features.

New Features

Lockpicking Minigames: Added a new mechanic where players can attempt to pick locks via a minigame! (Check config for settings).

Transfer Ownership: Added a new command to allow players to transfer the ownership of their locked blocks to other players.

Expanded Friend System: You can now add more friends to your protection list than before.

⚙️ Technical & Backend

Database Support: Now fully supports MySQL and SQLite! This allows for faster data handling and cross-server syncing capabilities in the future.

UUID Support: Migrated to UUIDs for player identification. This ensures players keep their locks even if they change their Minecraft usernames.

Optimization: General code cleanup and performance improvements to reduce server lag.️

Admin Controls

Max Lock Limits: Admins can now set a maximum limit on how many locks a specific player can own (configurable).

Bug Fixes

Redstone Protection: Fixed a critical issue where locked doors, trapdoors, and fence gates could still be opened using Redstone mechanics (levers, buttons, pressure plates). They are now properly secured.

⚠️ Important Notes for Admins

Config Reset Recommended: Because of the new MySQL/SQLite support and Max Lock Limits, your config.yml has changed. Please backup your old config and regenerate a new one to access these features.

What’s New in v1.5?

️ Hopper-Sync Technology: Previously, players could place a hopper under a locked chest to steal items. In v1.5, items will only move if the Hopper is also locked by the same owner as the Chest. Security meets automation!

⚖️ Scaling Tax System: Introduced a "Scaling Penalty" in the economy settings. You can now charge players more for maintenance if they own a massive number of protected containers.

Hardened Environment Protection: Overhauled the listeners for TNT, Creepers, Pistons, Fire-spread, and Liquid-flow. Your locks are now 100% indestructible to environmental grief.

Bug Fixes & Improvements:

Fixed: Players could occasionally break signs by clicking specific edges.

Fixed: Brewing stands and Lecterns now properly respect friend permissions.

Improved: Action Bar messages are now smoother and provide real-time bank balance info.

Improved: Optimized the findSign logic to reduce CPU usage on high-player-count servers.

⚠️ IMPORTANT CONFIG CHANGE: We have added many new strings and security toggles. It is highly recommended that you delete your old config.yml and let the plugin generate a fresh one to access the new features!

📦 ChestLocked v1.4 - The Economy & Absolute Security Update 🔧 CRITICAL SECURITY FIXES Fixed: Block Breaking Exploit

Previous Issue: Players were able to break locked chests and signs using tools (axes/pickaxes), bypassing the protection entirely.

Solution: Implemented a robust BlockBreakEvent listener. Locked containers and their respective signs are now indestructible to anyone except the Owner or an Admin.

Smart Auto-Cleanup: If the Owner or an Admin breaks the container, the lock metadata and attached signs are automatically cleared to prevent "floating" protection data.

💰 NEW FEATURES: Economy & Rental System (Requires Vault and a compatible Economy plugin like EssentialsX)

Paid Locking:

Server owners can now charge players a fee to lock a container.

Configurable: Set the price via economy.lock-cost.

Daily Rental Tax:

Introduced a "Rental" system to prevent map clutter. Players must pay a recurring fee to keep their protection active.

The system checks for tax due every time the owner opens the chest.

Configurable: Set the tax amount and frequency (e.g., every 24 hours).

Management GUI Update:

Added a Tax Info (Gold Ingot) icon in the Shift+Right-Click menu. Players can now view their daily tax rates and payment status directly in-game.

🛡️ Administrative & VIP Enhancements New Bypass Permissions:

chestlock.bypass.cost: Allows players (VIPs/Staff) to lock containers for free.

chestlock.bypass.tax: Exempts specific players from the Daily Rental Tax.

Maintenance Integration:

The Auto-Expire logic is now fully integrated with the block-breaking system. If a player has been inactive for 30+ days (configurable), their locks become breakable by the public, acting as an automatic "raiding" or "cleanup" mechanic.