Fixed a bug who can used from hacked clients.
Merge pull request #1275 from Howaner/BlockEntitys

Verify beacon effects sent by the client before setting them.