Exploiters using a Ban API bypass for rejoining same server they were banned on

Bug Reports Engine Bugs
,
1

There are currently exploiters that are able to rejoin the same Roblox server that they were banned on with the native Ban API.
The creator page does indeed say they were banned but they are still able to join anyways.

There are a few workarounds to ensure this doesn’t happen.

  1. Ban them twice
  2. Track if a player was banned in a server and if they rejoin you kick them
  3. Check a players ban history through Players:GetBanHistoryAsync(…) and kick them if it says they’re banned

A private message is associated with this bug report

2 Likes
2

Hi @aaron_mccoy! Thanks for reporting this. I will follow up with you in the private message.

3

Hello
If i may say, i’ve heard about a bypass like this from a fellow friend.
The way you can possibly do this is by: Deleting every roblox related file on your system before than reinstalling roblox
This must be done before you join the place you have been banned from using the Ban API

I haven’t tested this so im not quite sure about if this works

4

I’ve experienced this before. I saw people I banned rejoin my game. Banning them a second time did indeed work.

5

Hey folks! We followed up with some reports of this from other creators and weren’t able to reproduce the bug. If anyone is able to reproduce this reliably, could you follow up with us in a private message?

The way you can possibly do this is by: Deleting every roblox related file on your system before than reinstalling roblox

The ban is associated with the user ID, so this would not be a working bypass.

6

Im unable to send you a PM though i have provided information on how to do it here If player rejoined right after Players:BanAsync is called on the them, they will be able to temporary play the game until they leave

7

i once kept getting harrassed by some guy who kept bypassing ban api ip bans (he kept creating alt accounts and was just telling everyone i did bad things):grin:

8

can you explain why you or your managers won’t let us IP ban people

imagine the owner of a game not being able to actually ban people. i can’t think of any other platform on the planet that does this. the company’s management needs to stop dragging it’s feet and calling this a “ban API” when that’s not even what it is to begin with

i want to point out how strange this is too: Ban API: New Device Blocking Capability

a hardware ban feature finally gets released, and it’s on a… 24 hour limit? no other platform does this, stop handicapping basic features that should’ve been added a decade ago to a point where you might as well not even use them, because they released in a by definition completely broken state. it’s not a “hardware ban” if the “ban” can’t be infinite LOL. if the mindset is “WHAT IF A DEVELOPER’S FAULTY ANTI CHEAT BANS ALL OF HIS PLAYERS?!!111!” that’s his fault, not yours, do not handicap us because you’re afraid 0.01% of devs are going to nuke their player base