Pryaxis/TShock v4.5.8

TShock 4.5.8 (Terraria 1.4.3.1)

on GitHub

This release includes a security fix for GHSA-6w5v-hxr3-m2wx.

Did you miss version 4.5.6? A lot of stuff changed in TShock 4.5.6 so you might want to read those change notes too.

Did you miss version 4.5.7? Some stuff changed in that release too.

Notable changes

• Removed TShockAPI/DB/DBTools.cs. This appears to have been dead code and not used by anything. (@hakusaro, @DeathCradle)
• Fixed the /firework command not sending fireworks when specified without a firework color. The firework command now correctly sends red fireworks to a target if a color is not specified. (@hakusaro, @Kojirremer)
• Fixed bad XML of TShock code documentation. (@Arthri)
• Fixed Bouncer exploits allowing for invalid tiles' placement. These tiles(specifically torches) caused clients to crash. The fixed exploits are listed below. (@Arthri, @QuiCM)
  • Biome Torch Correction. Previously, it used unrelated values to validate biome torches, and unintentionally passed on invalid tiles. It's now fixed to use the correct values and block invalid torches. As well as a new right booster track correction/check, to allow right booster tracks to be placed. Right booster track is an extraneous place style because it depends on the direction the player is facing. The new check takes that into consideration so that the place style isn't considered mismatched and rejected.
  • Max Place Styles. Previously, it rejects only if both MaxPlaceStyles and ExtraneousPlaceStyles contains an entry for a tile, and unintentionally passed on invalid tiles. ExtraneousPlaceStyles only contains special max placeStyles, not all placeables unlike MaxPlaceStyles. It's now corrected to take from ExtraneousPlaceStyles first, then fallback to MaxPlaceStyles if there's no entry for that tile, and then finally -1 if there's no entry in either.

Updating

To update TShock, simply replace all of the files in your server folder with those from the release folder.