From ad4790f74cfeb3a82ba9d0d4eca98ecdd54f0983 Mon Sep 17 00:00:00 2001
From: tjnenrtn <tjnenrtn@protonmail.com>
Date: Wed, 24 May 2017 23:57:42 -0400
Subject: [PATCH] verify inbox owner when taking items

---
 inbox/init.lua | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/inbox/init.lua b/inbox/init.lua
index 280edf2e..5ee77a8c 100644
--- a/inbox/init.lua
+++ b/inbox/init.lua
@@ -92,6 +92,19 @@ minetest.register_node("inbox:empty", {
 			end
 		end
 	end,
+	allow_metadata_inventory_take = function(pos, listname, index, stack, player)
+		local meta = minetest.get_meta(pos)
+		local owner = meta:get_string("owner")
+		if player:get_player_name() == owner or
+				minetest.check_player_privs(player, "protection_bypass") and
+				clicker:get_player_control().aux1 then
+			return stack:get_count()
+		end
+		return 0
+	end,
+	allow_metadata_inventory_move = function(pos)
+		return 0
+	end,
 })
 
 function inbox.get_inbox_formspec(pos)