[Game Update] - 651414

[Philip.]

I think we can all agree on the fact that the TheSim:QueryServer as the only way for mods to communicate with the outside world should be just left alone without the restrictions added in this update.

On the other hand, I think we can also agree on the changes made to the TheSim:SetPersistentString and TheSim:SetPersistentStringInClusterSlot, since overwriting auto-ran files just enables the mod to inject code into the game that is being run every time the game starts without the user knowing or having any mods enabled, which is malicious enough in itself.

Now I would like to throw some light on the changes to io.open and it's write mode ("w") which has been basically completely removed. The concerns around this functionality were that it is capable of overriding mod files (again, injecting code or breaking them) and also some unzipped game files. Those are all valid concerns but I do think that they should be addressed more specifically and not just by blocking the whole functionality. For example, when being called from a mod, do not allow the function to modify files outside the mod's folder.

[17662593060]

I believe that disabling the Query Server feature is very unwise.This feature is quite helpful for mod makers.Disabling it may lead to a decrease in the quality and quantity of mods,which is not conducive to the player experience.

[ZerRaxs]

The disabling of QueryServer functionality is highly detrimental to the development of the game mod ecosystem, and we hope to restore it as soon as possible

[yao qishi]

As a game with an immensely rich array of mod content, Don't Starve can be said to complement mods perfectly. However, if this feature were lost, many mods would be compromised, which would be detrimental to the entire mod development community of Don't Starve. It would also significantly impact the game's internal activity levels. Therefore, it is hoped that this functionality can be restored.

[pdx]

I would like to restore the functionality of the QueryServer, and the disabling of the QueryServer functionality is not conducive to the development of game mods
Mods are very important for us gamers who love games.

[Cctt]

Going back to check this post, there are many new users' comments following my message.

amazing!

[GaGa8357]

In fact, many of the previous users were maliciously influenced by a skin purchase mod author to brush comments, as closing QueryServer prevented him from updating the skins for sale in the game. From this perspective, restoring QueryServer is not a good choice, as it goes against the mod policy you have always established.

[Guille114]

A mod creator asked people to come post here and pay cash for this each of them.

This may because this mod monetizes by selling skins and uses QueryServer functionality for paid verification.

This maod is https://steamcommunity.com/sharedfiles/filedetails/?id=3235319974

[Guille114]

Although he used encrypted mod files (which also broke workshop rules), some people still printed out the paid content in the mod and sent it to GitHub as evidence.

https://github.com/qwertyuiop825/DST_DengXian/blob/main/收费皮肤数据.txt

Edited January 28, 2025 by Guille114

[Picklesaurus]

A chinese friend told me some modders want QueryServer back because it allowed those modders to sell skins. What is QueryServer? 

8 hours ago, Waywarbler said:

Was there a call to action somewhere? How come like 18 replies appeared from new accounts in the span of an hour?

It is because without QueryServer it becomes difficult to sell skins. So modders who sell skins are paying people to create accounts and come here to enable QueryServer again.  

Edited January 28, 2025 by Picklesaurus

[kipper0k]

4 hours ago, Guille114 said:

A mod creator asked people to come post here and pay cash for this each of them.

This may because this mod monetizes by selling skins and uses QueryServer functionality for paid verification.

This maod is https://steamcommunity.com/sharedfiles/filedetails/?id=3235319974

Sorry, this was done because of my mod

[IronFuzzball]

Clearly, removing QueryServer has shed light on some greater issue at play here about mod monetization and malicious mods.

QueryServer is still a very powerful and useful tool for modding when used in the right way. Since it seems fairly easy to hardcode QueryServer to reach certain URLs (as we saw in this update), maybe Klei could have some sort of "verified URLs" program. Mods would have to demonstrate that their need to access a URL aligns with TOS before it is whitelisted. Perhaps localhost could be added to that list right away.

The list could even be stored at Klei and pulled down to the game at runtime, so no hotfixes would be required to update the list.

I know that this would put extra load on the developers though, and may be inconvenient for people just using queryserver honestly.

Edited January 28, 2025 by IronFuzzball

[clearlove]

On 2025/1/28 at AM12点27分, Serpens said:

有什么合适的替代方法来保存信息，以便玩家在其他保存中也能使用？

在我的特定情况下，我在我的冒险模式模组中使用了 io.write 来保存并告诉游戏在下一个世界生成时要生成什么样的世界。我不是程序员 DarkXero 多年前写了那段代码。他还使用 TheSim:SetPersistentString 来保存组件信息（如库存），以便在下一个世界中恢复它，幸运的是，这似乎仍然有效。但不知道为什么他没有使用 SetPersistentString 而不是 io.write 来获取关于下一个要加载的世界的信息……

I think I've encountered the same issue. In modworldgenmain.lua, `TheSim` is not always available and may be `nil`, so I had to use `io.write` to log information. This update has caused my mod to stop working. Does anyone know if there are any other ways to write logs?

[cooooooool]

https://forums.kleientertainment.com/forums/topic/163361-game-update-651414/?do=findComment&comment=1790551

Let me translate these two images for you. The first image is a group chat record, which mainly includes:
1. A PDF document titled "Klei Forum Posting Process."
2. Two pieces of content posted by the QQ group owner, mainly stating:
A 200 RMB red envelope will be sent in each of the 13 mod group chats that evening to thank users for their support of the mod.
Users are additionally requested to follow the instructions in the document to post specified content on the Klei forum. After posting, they can contact the group owner with a screenshot to receive a 10 RMB reward.
The second image contains the content of the PDF document, which is mainly a Chinese pictorial tutorial instructing users on how to post specified content on the Klei forum. The specified content mainly requests the official restoration of the QueryServer function and also guides users on how to hide their intentions, such as:
Pretending to be an unrelated person, speaking from a god's perspective, and stating that the disabling of QueryServer is a very bad decision.
Trying to express grief, attempting to show that the disabling of this service has caused immeasurable consequences for themselves, or that their friends have suffered significant setbacks because of it.
Alternatively, trying to stand from the official's perspective, stating that the disabling of this service is very detrimental to the future development of the game's mod ecosystem, and hoping for its quick restoration.
Finally, the tutorial also requires users, after replying with the specified content in the designated post, to try to make a separate post to appeal against the disabling of the service.

As you can see, QueryServer might be a very useful tool for developers, but it has also been widely abused. Some mod creators completely disregard the relevant regulations of the Steam Workshop and the interests of Klei. You might find it hard to imagine, but they sell skins under the guise of donations and rewards for prices exceeding 50 RMB, with some special skins costing over 500 RMB. I don't think this is a good thing. Even worse, some have cracked the official game's skin content for sale, using this API for remote verification, allowing only those who have purchased to enjoy the privilege of all official item skins. Shouldn't such behavior be curbed?

Edited January 29, 2025 by cooooooool

[TheKaoticFoxi23]

On 1/28/2025 at 12:47 AM, Violet Desiree said:

which ones

Steamed collection and Cherry forest. Cherry forest isn't completly broken, thankfully, but all the new belongigs added, as well as skins for the new character they added, either aren't available at all or are locked. And steamed collection just straight up doesn't work at all other than the vignette (I wanted to reply to this but forgot, and coming back here and seeing some people apperently were being paid off to protest breaks my heart as someone who actually had mods they liked broken :[)