Version: 41.65
Multiplayer
Dedicated Server (Windows Server 2019 Standard Edition)
Mods:
DylansZombieLoot;
AdmMTiles;
tsarslib;
OutTheWindow;
Authentic Z - Current;
Urination;
myclothinguimod;
TMC_TrueActions;
RainWash;
DisableAdminUI;
PlayableArcadeMachines41;
Defecation;
Authentic Z - Fashion Montage;
MoreDescriptionForTraits;
CSWH;
ChatBubble;
Reproduction steps: Unknown
Description:
I run a public PZ server that gets quite alot of activity on a daily basis (20-30 players). Though I've recently discovered a concerning issue which I am not sure if it just impacts me or others too.
To explain the issue of what I am seeing - I had a new player join my server for the first time yesterday and they reported that they were logged into an existing character with gear, etc and didn't get the option to create a character, so that caught my attention.
I had a look at the serverdb file and noticed that many rows that contained authentication data were mostly gone i.e the stored passwords, last connection time and the steam ids were gone but username was still there.
I originally thought that it may have been caused by corruption as my server has blue screened a few times (Win Server 2019) but if that was the case I would also imagine that the full record would have been lost too including the 'username' field but the 'username' for all of the case examples seems to be retained fine. The associated player save in the 'playersdb' file also seems to be fine.
The resulting issue of this now is that if a player joins with a username of one of these effected records with no passwords, is that the server just accepts their login and stores the new password in the serverdb file. As there is also a matching character save in the playerdb file it auto loads them into the character of the previous owner.
I'm not sure when this started occuring, I am only aware of it occuring yesterday. There was a huge chunk of players effected in the serverdb with no passwords. My work around for the timebeing is inserting a dummy password to the ones that were missing in hopes that it prevents any access and the real owner can contact me, but as the 'steam id' field is also missing it makes it harder to prove that they originally owned the account.
Over the past 24 hours or so there has been no crashes or instability issues but I can slowly see missing entries building back up again (about 50 currently) and for each of them the 'username' field is retained yet all other fields going missing.
Due to the sensitive nature of this, I am trying to keep the server identity anonymous as possible. For this reason I haven't attached server logs to this post but I am more than happy to provide a download link to said links if any moderators/staff etc request them via PM.
If there is any debugging logging for SQL or similar that I can enable please let me know and I can enable and let it run to gather more info to see what is occuring.
Thanks!