TShock/TShock — pull request #488 by CoderCow (2013-07-01 10:10:43+00:00)
Title: SSI Exploit Fix and Made /overidessi Actually Useful

The /overridessi command appeared, to be completely useless to me.
It's meant to fix the inventory of a player so that they can login again by just overwriting their inventory in the database with their current inventory. But the targeting player had to be logged in in order to use this command on them, where no login was possible at this point.

About the exploit, it worked like this:
-Join a server with DisableLoginBeforeJoin = true.
-Put an item into your trash can.
-Login now.
-Take the item out of your trash can.
-Successfully sneaked that item around SSI and IgnoreActionsForClearingTrashCan is false.

If the player would have done /login before moving the item to their trash can, it wouldn't have worked though because IgnoreActionsForClearingTrashCan would have been set to true in that case.