Dead players can interact with the world

The bug

Players who died but did not press "Respawn" can interact with the world. Possibly all packets they send are treated as valid packets. This means that they can break blocks, attack entities or players...