Where does the bug appear: Server
When did the bug appear: maybe already long time ago
Describe the bug: /allowpm can be spammed?
Frequency: (always)
Severity: (major)
Steps to reproduce: just try to spam /allowpm on someone
Here is how it works, when you turned off PMs and /allowpm someone, you allows them to send you a private message, but when you use /allowpm again on the same person, you will actually cancel the permission for him to send you a private message. So when he spam the commands ,you will keep receiving the message as the permission is given and canceled back and forth. It is not a bug though , maybe devs just didn't expect someone will use this to spam someone else.