
Originally Posted by
Akida
We're still actively working on the odoRE server. If we've made progress (e.g. implemented some fixes) we'll make a new release of course.
The odoRE server uses an embedded/portable version of MongoDB Community Edition for its database. This database software is used by the odoRE server to store and retrieve player data (like inventories, login details, etc.).
Because it's only required for the odoRE server to be able to connect to MongoDB (only the odoRE server has to store/retrieve data), you should block all external connections to MongoDB using your (Windows) firewall. Since the embedded/portable MongoDB is not password protected, not blocking connections to it could result in everyone on the Internet being able to access and edit the database. Including usernames, passwords, inventory data, etc. This is considered a serious security risk with a high probability of being exploited. That's why we chose to explicitly mention it in the instructions.
Next to that, MongoDB is still under active development. We've put the latest version of MongoDB Community Edition (portable) inside the release folder to make the one-click-run possible. But since MongoDB is still in active development, bugs and security leaks will most likely be found. Therefore we decided to also include the recommendation to update the included MongoDB version whenever the MongoDB developers release a new version.