Skip to content

Add optional TS3-side confirmation step for IP-based account matching to prevent abuse #1

Description

@mrfroncu

Current transfer process relies on IP-based matching between TS3 and TS6 clients. While convenient, this approach can be unsafe in shared-network environments, where multiple users may appear under the same public IP.

This proposal introduces an additional authorization step: a confirmation request sent via private message to the detected TS3 client before allowing the rank transfer to proceed.

Proposed Solution

Introduce an optional verification step requiring explicit confirmation from the matched TS3 client.

Workflow

  1. User initiates the transfer process
  2. Bot sends a private message to the matched TS3 client
  3. Message asks for confirmation (e.g. "Are you attempting to transfer your server groups to TS6? Reply with y/n")
  4. System waits for response:
    • y → proceed with transfer
    • n or no response (timeout) → abort transfer -> add cooldown for this IP

Optional Enhancements

  • Configurable response timeout
  • Custom confirmation keywords (yes/no, y/n, etc.)
  • Config flag to enable/disable the feature
  • Logging of attempts and outcomes

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions