Nebula Infinity is a modern and user-friendly admin panel designed for moderation and trolling the exploiters within your experience. It offers comprehensive tools for analytics, player trolling.
Please keep in mind that this file is a test file, you can get that here
All of the scripts are a dumpster fire full of deprecated functions, bad practices and useless while loops, also why would you and your friend need owner rank in everyone’s game? Doesn’t seem necessary to me.
The whole thing seems like a fashion show instead of an actually useful admin panel. There’s literally a loading screen that just waits for like 5 seconds without loading anything (assuming I saw the correct script), not sure about everyone else, but I’d like for my admin panel to open up instantly when encountering an exploiter or something.
Each local script on top is a while loop and only one of them has a different rotation increase amount.
Not sure why this admin panel needs to use HTTP service as well, I didn’t look thru every script, but seems like an useless thing to require for the user to enable.
From a quick skim through the code, the HTTP requests are used for F3X building tools and some analytics visible in the experience information page… which could be seen on the front page of the game by any user, making it all redundant.
The backdoor is pretty inexcusable, however. For example, Adonis has one but it is a documented config option and easy enough to turn off, which is how it should have been implemented here.
I’m not too sure on all the details of it, but F3X has been privy to some exploitable code in the past so it might be worth making sure only authenticated users are able to use the remotes as the entire codebase for F3X is implemented into it already. (If that hasn’t already been done. The codebase is too large to skim through to find that.)
Finally, not sure if it’s intended but the PublishMessage remote has no protection to stop unauthenticated users from using it and spamming it. If a game relys on MessagingService for anything like server management, then it could cause havoc if an exploiter were to spam it causing rate limits. Not to mention, it would clog up the chat making it useless.
It’s a shame this is in a somewhat unusable state right now as visually it isn’t too bad. Maybe some UI elements are a bit too big, but it’s not far off something I’ve been trying to create on and off for a while.
EDIT: Ok, it’s worse than I thought. The Request remote function is not verifying permissions. Exploiters could just straight up server ban everyone. DO NOT use this until this is patched.
All of these rotate different instances, and one is different because I wanted it to go slower…
This is encase of a exploiter getting access to the panel within a experience, we can remove the
panel from the game and that is the co-owner of Sacred Studios™
I’ll make this a setting with-in a new setting (in the setting’s page.)
Than may change ^
You can still put the rotation logic inside a single loop which will be better for the client.
This is the dumbest reply ever, so you’re gonna be monitoring the players inside every game that uses this panel? You can’t even remove the panel from the game, even if you manage to remove it from one server the exploiter can just go to another server.
You could’ve just said that this was a mistake and it would’ve been forgotten about, but you already messed up by defending this.
Instead of making this a setting how about you let the users disable the owner access that you have in each game using this. Also just make an actually functional loading screen instead of a single wait statement that doesn’t load anything.
Alright, as I mentioned earlier, this will be a part of an anti-cheat system, and we will not be hiding the fact that the co-owner of Sacred Studios™ and I have access to the panel. However, the panel will not have an anti-cheat feature until the second edition, so our permissions will be removed later on.
Currently, we are deciding what will go in the second version and what will go in the first, so that is staying there unless we no longer need it (before release it will most likely get removed)
Now that’s just crazy… you found one thing that you think is a “backdoor” and you’re now going to assume that I am going to put more “backdoors” into the panel…