t3hk0d3/PermissionsEx — Issue #277: Playername characters can act as wildcards, giving access to permissions entities with another name. 
Author: wiigor
Created: 2012-02-21 20:17:52+00:00
State: open

On my server minecrafters.nl we found that players have been joining with names consisting only of underscores.

If the amount of underscores in the name of the joining player matches the length of a playername in a group.
Then the joining player will get both the label and access to the permission nodes of the player in the group even if
the names dont match literally.

Its seems like the amount of underscore in a connected player name is able to act like some sort of wildcard of selector
selecting a matching name from the groups in the permissions_entity table

We have tested this with multiple names and have been able to match multiple groups. The non existance of the online player in the group has also been verified.