Mods / ModIntegrity — allowlist client-only mods

Category: #Other
Author: goxmeor
Side: Both
Created: Mar 28th 2021 at 6:59 AM
Last modified: Mar 28th 2021 at 7:00 AM
Downloads: 390
Follow Unfollow 3

Latest file for v1.14.8:
ModIntegrity-0.2.0.zip 1-click install


Helps ensure that the client uses only mods approved by the server. It's intended for modpack authors or server owners to restrict which client-only mods their players can use. Mods are checked by mod ID, version, source type (e.g. "zip"), and MD5 fingerprint.

How It Works

The client, upon joining, sends a report of all of its enabled mods to the server, including any enabled client-only mods. MD5 fingerprints of the mods' files/folders are included (don't worry, it's very fast.) The server checks that the report matches the mods that it's running, plus any client-only mods which have been allowlisted in its config JSON file. If any mods don't match, the player is disconnected with a helpful message which lists which mods caused problems and hints about how to fix things (see below.)

To make things easier for modpack authors or server owners, a command /modintegrityapprove can be used to easily add all mods that someone was just kicked for. Getting yourself kicked and using this feature is the easiest way to allowlist the client-only mods in your modpack, as a server owner. Just join your own server, get kicked, then copy-paste the /modintegrityapprove myPlayerUID command from the server console to add all your enabled client-side mods.

Disconnect Messages

Examples of the 4 types of mod issues:

  • Unrecognized or banned mod "Make Ice Unslippery" — please disable this mod using the in-game Mod Manager.
  • Unrecognized or banned version "0.0.1" for mod "Autopottery" — please update to a known good version, such as: 1.0.0
  • Unrecognized or banned source type "DLL" for mod "Drifter Googly Eyes" — please update this mod to use a known good source type, such as: Zip
  • Unrecognized or banned fingerprint for mod "Secret Drift Wolves" — please update this mod with a freshly downloaded copy.

The message "Please contact the server owner with any problems or to request new mods." can be customized in %appdata%/VintagestoryData/ModConfig/ModIntegrity.json. You should may want to add your own contact information!

Primary Motivation

Some client-only mods give players an advantage which doesn't match the intended gameplay of a modpack author or server owner. For example, some client-only mods can expose coordinates (which isn't supposed to be allowed on Wilderness Survival playstyle) or show where enemies are through walls. There's probably an X-ray mod out there too...

Caveats

Doesn't verify any client-side files outside of the mods' source files, so any mod config JSON files can be tampered with, as well as any vanilla assets or dlls.

This is not exactly the most advanced anti-cheat system; however, it should stop "casual cheating". Players who want to cheat will need to explicitly circumvent this system, rather than innocently adding (or forgetting to remove) client-side mods.

Version For Game version Downloads Release date Changelog Download 1-click mod install*
v0.2.0 390 Mar 28th 2021 at 7:00 AM Show ModIntegrity-0.2.0.zip Install now

7 Comments (oldest first | newest first)

💬 Yorokobii, Sep 29th 2023 at 7:53 PM

Hey updated the mod to 1.18 here https://mods.vintagestory.at/modcheck

💬 Teknik, May 4th 2023 at 3:55 PM

we need it for 1.18 please update goxmeor

💬 RogueRaiden, May 4th 2023 at 3:55 PM

https://mods.vintagestory.at/tegridy This one is more likely to get an update for any that come by here

💬 DasPrinzip, May 4th 2023 at 2:48 PM

Please Update to 1.18.x

💬 RogueRaiden, May 4th 2023 at 8:33 AM

Can we get an update for 1.18? There is now a client side xray mod that is perfect to block on servers.

💬 goxmeorAuthor, Mar 29th 2021 at 10:22 PM

Thanks! Both are required.

💬 CJHKnight2, Mar 29th 2021 at 8:46 PM

Nice mod! Is it server side only or both required?

(edit comment delete)