ВЕРСИИ (3)

A major stability and security update. **Back up** `storage.yml`, `data.db`, ​​or your MySQL database **before updating**. ## ⚠️ Important Update Notes - **PlaceholderAPI is now mandatory.** The plugin will not start without it. - **MySQL:** Tables now use the `treexclans_` prefix. Old tables will be renamed automatically upon the first startup. - **SQLite:** `data.db-wal` and `data.db-shm` files will appear alongside `data.db`; this is normal—do not delete them. - Upon the first startup, the plugin will automatically remove players who were listed in two clans simultaneously due to old bugs (check the console for details). New settings and messages will be added to your `config.yml` and `messages.yml` automatically; your existing changes will remain intact. ## New Settings (`config.yml`) ```yaml storage: autosave-minutes: 5 # clan autosave interval ​​ table-prefix: "treexclans_" # MySQL table prefix base-teleport-delay: 3 # /clan base delay in seconds; 0 for instant ``` ## Security and Duplication Fixes - Fixed a money duplication exploit involving `/clan deposit` and `/clan withdraw` with invalid amounts. - `/clan withdraw` now checks for the `withdraw` permission (previously, the `deposit` permission was sufficient). - Fixed an item duplication exploit involving the clan chest after a server restart. - Permissions modified in one clan's rank menu no longer apply to other clans. - The leader rank can no longer be modified via the permissions menu. - Clan chat no longer processes formatting tags or clickable elements from player messages. - Muted players can no longer write in the clan chat, including via `/clan chat <text>`. - The member limit can no longer be bypassed by sending multiple invitations. - Invitations from a deleted clan are no longer valid for a new clan with the same name. - `/clan transfer` no longer causes the server to hang. - `/clan kick` and `/clan invite` no longer trigger for a player whose username merely starts with the specified text. ## Data Saving - Added auto-saving. Money and clan roster are saved immediately after changes; the chest is saved immediately after closing. - Kicked players and those who left no longer return to the clan after a restart. - Deleted clans are no longer restored after a restart when using SQLite/MySQL. - Renaming a clan no longer creates a duplicate clan or causes the loss of addon data. - `storage.yml` no longer becomes corrupted if the server crashes during saving. - A single corrupted clan no longer prevents the plugin from starting; it is skipped, and an error is logged to the console. - Clan base data in a world that hasn't loaded yet is no longer wiped. ## Gameplay Changes - `/clan base` is now a delayed teleport. It is cancelled upon movement or taking damage. - The clan creation fee is charged only if the clan is successfully created. - Renaming a clan no longer incurs the creation fee. - `/clan kick`, `/clan setrank`, and `/clan transfer` now work with offline members. - `/clan accept` checks if there is available space in the clan. - The slogan now uses its own length and character settings from the `slogan` section (previously, it used prefix settings). - At the maximum level, clan XP now accumulates instead of resetting. - Fixed the "last seen" timestamp for players who have been offline for more than 24 days. ## Admin Commands - `/tc reload` no longer breaks addon commands and only closes the plugin menu. - `/tc reset_storage` requires confirmation (`/tc reset_storage confirm`) and actually deletes clans. - `/tc clan <clan> disband` now works from the console. - `/tc clan <clan> rename` validates the name and notifies you if it is already taken. - `/tc` commands no longer throw errors when arguments are missing or numbers are invalid. ## Other - Fixed console errors related to `/clan setrank` for players not in a clan and the member menu displaying a player without a known username. - Addons now load in the correct dependency order. Rank permissions from addons no longer reset after a restart. - Configuration updates from older versions are now applied in a single startup. - Optimized player clan lookups (placeholders, chat, damage).

## For Developers - I developed a smart technology for the new Storage system called **BaseSection**. It allows your addons to store any custom data directly in the plugin's own storage, so you no longer have to implement your own storage system. Why is it "smart"? Because even if a server owner switches the storage backend from YAML to SQLite or anything else in the future, **your code won't need any changes**. You won't have to adapt your addon for each storage implementation—the data will automatically be routed to the correct backend. This system is the main reason why this update took longer than expected. And yes, **BaseSection is fully asynchronous**, powered by `CompletableFuture`. - You can now create custom permissions for ranks. Example: ```java Permission permission = PermissionRegistry.register("glow"); if (member.getRank().hasPermission(permission)) { // yes } else { // no } ``` The registered permission can then be assigned to a rank by its ID directly in the config or GUI. ## For Users - Added a clan storage filter: ```yaml clan-storage: filter: type: BLACKLIST # or WHITELIST materials: - BEDROCK - BARRIER ``` - Along with BaseSection, **SQLite** and **MySQL** support has been added. These storage implementations are currently experimental and may receive improvements in future updates. **YAML remains the stable backend**, just as before. - The `/treexclans reload` command has been improved. However, storage is no longer restarted during reload, since doing so could slow down the reload process. - The **RanksGui** model has been slightly changed: - Instead of `type: all_ranks`, use `rank: all`, or instead of `type: leader_rank`, use `rank: leader`. - You can now also define any custom rank and give it a unique style in the menu, for example `rank: manager`. - Fixed placeholders: - `%clan_tag%` - `%clan_prefix%` - New placeholder: - `%clan_addon_status_<id>%` — Returns `true` if an addon with the specified ID is loaded; otherwise returns `false`. - Added the `/clan rename` command to change a clan's tag. - Added the `/clan transfer` command to transfer clan ownership to another player. **New admin commands:** ``` ▪ /tc clan <clan> disband - Disband a clan ▪ /tc clan <clan> rename - Change the clan tag ▪ /tc clan <clan> setprefix - Change the clan prefix ▪ /tc clan <clan> setslogan - Change the clan slogan ▪ /tc clan <clan> balance - View the clan bank balance ▪ /tc clan <clan> withdraw - Withdraw money from the clan bank ▪ /tc clan <clan> deposit - Deposit money into the clan bank ▪ /tc clan <clan> base - Teleport to the clan base ▪ /tc clan <clan> resetbase - Remove the clan base ▪ /tc clan <clan> transfer - Transfer clan ownership ▪ /tc clan <clan> chest - Open the clan storage ▪ /tc reset_storage - Clear the storage database ``` - While testing the plugin, I discovered a potential vulnerability where players could use any PlaceholderAPI placeholder in `/clan setslogan` and `/clan chat`, causing it to be parsed. This has been fixed. - **Internal** placeholders now use the `{placeholder}` format instead of `%placeholder%` for better clarity and to distinguish them from PlaceholderAPI placeholders.