I'm a collaborator working to build custom maps via steam workshop. When working with Mirror Peak map, found a couple of issues with multiplayer maps that lead to failure.



When playing a multiplayer game, the game save data is sent and stored in the Documents\Endless Legend\Temporary Files for play. The WorldGeneratorConfiguration.xml contains much of the information to load the map. The last bit for custom maps via steam workshop items will produce the following tag at the base of the xml document.





C:\Program Files (x86)\Steam\steamapps\workshop\content\289130\575877532

ArenaMount.tmx





This is all fine until the host or guest have different paths to there workshop items. When the paths mismatch the guests get a file not found exception and are unable to play the map.



Example:

Host: D:\Steam Archives\steamapps\workshop\content\289130\575877532

Guest: C:\Program Files (x86)\Steam\steamapps\workshop\content\289130\575877532



In addition to this, the copy of WorldGeneratorConfiguration.xml fails to update its , and . Instead they retain the paths the host have on there machine. This is not secure as it exposes details of the host machine architecture as well as the user's name because of the default path to documents



Example:

C:\Users\Host69\Documents\Endless Legend\Temporary Files\WorldGeneratorOutput.zip



This behavior should be updated to both make multiplayer maps more secure and properly resolve the path in a scenario to the correct path on the local machine.

Very nice find!

Not sure Amplitude will notice this, in this forum.

I'll forward this to the team, thanks for letting us know!