Mythic Key Roulette 1.1.14

Fixed

• Run and bet state messages now check who actually sent them. Cancelling a run, drawing its result, announcing the roster, turning a bet to rolling, or resolving it all trusted the message's own claimed sender field instead of who really sent it — so anyone with the addon could, in principle, forge one of these for a run or bet they didn't create, up to cancelling someone else's or slipping a fake result into their history. The real sender (which the addon message system itself guarantees, not something a payload can fake) is now checked against the run's creator or the bet's host before any of these are accepted. No addon message ever moves real gold; this closes the gap between "the addon's own honor system" and someone actively poking at it.

Changed

• The Guild tab now lists online members first by default. The default order only ever looked at keystone (who has one, then highest level), so someone offline with a strong key could sit above someone online with none — exactly what you'd want to sort by "Online" for, except you had to click it every time. Guild tab only; a favorite going offline still stays visible in the Favourites view, which already keeps offline people around on purpose.