BetterRewards

This release focuses on security, stability and GUI reliability.

Improvements

• Added stable hardware fingerprint tracking with session proof verification.
• Added redemption request IDs, timeouts and server-side rate limiting.
• Added strict packet direction validation.
• Added atomic JSON saving with rollback when persistence fails.
• Fixed data leaking between worlds.
• Fixed deleted and recreated codes retaining old redemption history.
• Added accurate online player statistics and periodic updates.
• Added /promo as an alias for /promocode.
• Restricted /promo list to operators.
• Preserved entered promo codes during resize, GUI-scale and banner updates.
• Fixed incorrect ?c and ?a message formatting.

Banner security

• Banner URLs must now use public HTTPS.
• Localhost and private-network URLs are rejected.
• Downloads are limited to 8 MiB.
• Images are limited to 4096×4096 pixels.
• Fixed endless download retries.
• Fixed outdated banner requests replacing newer banners.

Compatibility

This release updates the network protocol.

Both the server and all players must install v1.3.0.
v1.2.0 clients are not compatible with a v1.3.0 server.

Existing HTTP banner URLs must be replaced with HTTPS URLs.

Testing

• Full Forge clean build completed successfully.
• All regression tests passed.