ClientConnectedToServerEvent, EntityJoinWorldEvent for example. What should I do?

Send them later? Why do you need to send messages so early?

It causes a security breach if I send them later.

What are you talking about?

I am talking about my mod that needs to send a message that early.

Send them later? Why do you need to send messages so early?

As I already said, it will allow some bad guys to do bad things. There's no any other option except for sending a plugin message. Executing a command may help but it is a workaround and I do not like workarounds.

You want help, yes? So be fucking concrete. Why do you need to send messages so early?

Don't you get it?

It causes a security breach if I send them later.

What kind of security breach? Why?

A ban bypass. Because the info from the client will not be sent as early as possible, they could bypass the ban and do anything they want.

Even if your mod would be able to send this message that early, I could make a modification of your mod that does NOT send it that early and therefor still bypass the ban easily.

Any ban that requires action from the client is completely null and void. The client always lies.

 

You can enforce a ban just fine without sending any kind of message from the client.

There's a timeout on the server to prevent those type of modifications. And yes, I know that the client always lies, but are there any ways to make a hardware ban without client's help? By the way, I want to embed that mod into others so it could be less detectable for ones who want to bypass.

What is a "hardware ban"?

A ban by client's system drive UUID hash or client's main network card MAC hash, maybe by Windows registry entry or file somewhere deep in user's home directory.

Why? This is a horrible practice. Why is a ban by Minecraft UUID not enough?

This kind of servers is not appreciated here. This server is not mine, I'm just a hired coder.